exploit chain

OpenBSD Root Exploit Chains 37-Year-Old Shared-Memory Bug

Calif chained a 37-year-old SysV integer overflow with an OOB write to get root on OpenBSD 7.9 past KARL, SMAP and SMEP — and the PoC is already public.