Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Researchers have discovered a local privilege escalation exploit that can gain root access on OpenBSD 7.9. This exploit chains together an integer overflow bug that is approximately 37 years old with a separate kernel flaw. The exploit is able to bypass OpenBSD's kernel-address randomization and its hardware protections, including SMAP and SMEP. The security firm that found the flaws, Calif, has published a detailed writeup and proof-of-concept code. This publication came after OpenBSD had released a fix for the issues. The exploit demonstrates a significant vulnerability in the system.