Exploiting a 37-Year-Old Shared Memory Integer Overflow in OpenBSD Kernel

A 37-year-old integer overflow vulnerability in OpenBSD's shared memory subsystem was exploited to achieve local privilege escalation through a race condition and out-of-bounds write. The paper details mitigation strategies including safe-unlinking, PTE randomization, and non-deterministic kernel allocators to prevent similar exploits.

Comments

Read original article