<![CDATA[Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug]]>Security researchers at Calif have published a working local privilege escalation exploit that achieves root on OpenBSD 7.9, chaining an integer overflow that dates back roughly 37 years with a separate kernel flaw. According to the firm, the exploit also bypasses KARL kernel-address randomization along with the SMAP and SMEP hardware protections.

The root cause is an old integer overflow in OpenBSD's shared-memory handling, which the researchers combined with a second kernel bug to escalate privileges. Calif published a detailed writeup and full proof-of-concept code once OpenBSD shipped fixes for the issues.

At this time, no specific advisory or CVE identifier has been provided in the reporting, so administrators should track OpenBSD's official errata and patch channels for the corresponding fixes.

Mitigation guidance:

  • Update OpenBSD installations to a version containing the vendor's fixes as soon as they are available.
  • Monitor OpenBSD's official security announcements and errata for patch details.
  • Treat local privilege escalation risk seriously on multi-user or shared systems, where an unprivileged local user could exploit the chain.

Source: The Hacker News

Has your organization applied the OpenBSD patches, or are you still assessing exposure on shared systems?

]]>https://xploitlk.com/topic/712/researchers-demonstrate-openbsd-root-exploit-chaining-37-year-old-shared-memory-bugRSS for NodeTue, 27 Oct 2026 08:15:50 GMTFri, 16 Oct 2026 22:30:21 GMT60