Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Researchers have demonstrated a local privilege-escalation exploit that gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow in shared-memory code with a separate kernel use-after-free flaw, The Hacker News reports. Security firm Calif found and reported both flaws; OpenBSD shipped patches for them in September, and there is no evidence they have been used in attacks.