Researchers Exploit 37-Year-Old Shared-Memory Flaw in OpenBSD to Achieve Root Privileges

Researchers demonstrated a root exploit in OpenBSD 7.9 by chaining a 37-year-old integer overflow with a kernel vulnerability, bypassing KARL, SMAP, and SMEP protections. The exploit was disclosed by security firm Calif after OpenBSD's release, including proof-of-concept code.

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

Read original article