Calif publishes OpenBSD 7.9 root exploit chaining 37-year-old shm_nattch overflow with kernel out-of-bounds write; patched
Cybersecurity firm Calif published a full exploit and write-up for a local privilege escalation to root on OpenBSD 7.9, chaining two kernel flaws, one of which is a 37-year-old integer overflow inherited from the original BSD sources. The exploit bypasses KARL address randomization and SMAP/SMEP protections without requiring any informati…