Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD’s KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client’s memory,

Read More

ANSI escape injection in MCP servers: Hidden from humans, visible to AI

ANSI escape injection in MCP servers: Hidden from humans, visible to AI Source: Hacker News

Read More

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN

Read More