OpenBSD 7.9 Root Exploit Uncovered: 37-Year-Old Shared-Memory Bug Exploited

"" OpenBSD 7.9 users are advised to take immediate action to patch a critical vulnerability that allows attackers to exploit a 37-year-old shared-memory bug and gain root access. Researchers from Calif have published a detailed writeup and proof-of-concept code for the exploit, which bypasses OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections.

The vulnerability, which was discovered by Calif, is a result of an integer overflow in the system's shared memory. This overflow can be chained with a separate kernel flaw to gain root access, effectively bypassing OpenBSD's security features. The researchers claim that this exploit is not limited to OpenBSD 7.9 and can potentially be applied to other versions of the operating system.

The implications of this vulnerability are significant, as it can be used to gain root access and potentially compromise the entire system. This is a critical reminder of the importance of keeping operating systems and software up to date with the latest security patches.

Calif's researchers have published a detailed writeup and proof-of-concept code for the exploit, which can be found on their website. The writeup provides a comprehensive explanation of the vulnerability and how it can be exploited, as well as guidance on how to patch the system.

In the meantime, OpenBSD users are advised to update their systems to the latest version and apply any available security patches. This will help to mitigate the risk of exploitation and ensure that the system remains secure.

Source: Calif