OpenBSD 7.9 root exploit chains 37-year-old shared-memory bug

Security firm Calif published a proof-of-concept local privilege escalation exploit that gains root on OpenBSD 7.9. The chain combines a roughly 37-year-old integer overflow in shared memory with a separate kernel flaw, bypassing KARL address randomization and SMAP/SMEP protections.

• Exploit gains root on OpenBSD 7.9 via a two-flaw chain
• First bug is a ~37-year-old integer overflow in shared memory
• KARL address randomization and SMAP/SMEP were bypassed
• Calif released a writeup and full PoC after OpenBSD patched