Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD’s KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years

GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years Source: Hacker News

Read More

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root A security researcher has released working exploit code for four Linux kernel flaws that each let a local

Read More

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that

Read More