Yes, you got it. Lots of escalation privilege exploits target a binary run as root or a segment of code in the kernel and take control over it. The objective is usually to spawn a new process, a shell, from the initial process: it will have the same permissions (root) but allows to run commands easily (instead of having to write specific code).