Calif publishes OpenBSD root exploit linking two kernel flaws

First reported by Cyber Security News at · Updated · 2 sources

The exploit combines a roughly 37-year-old bug inherited from the original BSD source code with another kernel flaw to gain root access. The Hacker News reports that it works on OpenBSD 7.9 and bypasses KARL kernel-address randomization as well as the SMAP and SMEP hardware protections.

  • The old flaw involves a signed 16-bit shared-memory attachment counter, according to Cyber Security News.

Covered by 2 publishers within 4 hours of the first report.

Reporting2

Cyber Security News 37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released · Guru Baran
The Hacker News Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug · info@thehackernews.com (The Hacker News)