CYBERSECURITYTRACKER
Permanent story citation

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10551

As cited

Copy frozen at (site build).

vulnerabilities

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Researchers chained a decades-old integer overflow vulnerability with a separate kernel flaw to achieve local root privilege escalation on OpenBSD 7.9, circumventing kernel-address randomization (KARL) and hardware protections (SMAP and SMEP). Security firm Calif disclosed the attack with a detailed writeup and proof-of-concept code after OpenBSD released patches.

Why it matters: OpenBSD system administrators and developers must patch immediately; local attackers can escalate to root, and the exploit chain demonstrates how historical bugs remain exploitable despite modern mitigations.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary