Security researchers at Calif have released a working local privilege escalation exploit against OpenBSD 7.9 that achieves root access by combining a decades-old integer overflow bug with a second kernel flaw. The chain manages to sidestep OpenBSD's KARL address randomization along with the SMAP and SMEP hardware protections meant to stop this kind of attack. The team published a full technical writeup and proof-of-concept code after OpenBSD issued a fix.
// source: thehackernews.com ↗