GoKawiilResearchers find 37-year-old OpenBSD kernel bug enabling root privilege escalation
Security firm Calif reported a decades-old integer overflow bug in OpenBSD's shared memory attachment counter, tracing back to original BSD source code. Combined with a separate out-of-bounds write flaw, attackers could exploit a race condition to achieve local root access even with protections like KARL, SMAP, and SMEP enabled. OpenBSD has since patched both issues through errata 026 and 018.