Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Summary
Calif reports on a 37-year-old OpenBSD kernel vulnerability exploited to gain local root access. The article outlines the exploitation path leveraging SysV shared memory, race conditions, and memory corruption, and discusses mitigations such as safe-unlinking, PTE address randomization, non-deterministic allocators, and compiler-based protections.