Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD’s KARL kernel-address randomization and its SMAP and SMEP hardware protections.Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel

Cloudflare OS: an open platform for agents, apps, and work

Cloudflare OS: an open platform for agents, apps, and work Source: Hacker News

Tell HN: Cloudflare silently injects its analytics when you switch nameservers

Tell HN: Cloudflare silently injects its analytics when you switch nameservers Source: Hacker News