Researchers Chain 37-Year-Old Integer Overflow and Kernel Flaw to Escalate Privileges on OpenBSD 7.9

Researchers from security firm Calif have demonstrated a local privilege escalation exploit that achieves root access on OpenBSD 7.9. The attack chains two vulnerabilities: an integer overflow approximately 37 years old and a separate kernel flaw. According to the published writeup and proof-of-concept code, the exploit chain bypasses OpenBSD's KARL kernel-address space layout randomization as well as the SMAP (Supervisor Mode Access Prevention) and SMEP (Supervisor Mode Execution Protection) hardware protections.

The integer overflow, traced to legacy code, and the kernel flaw were identified by Calif and reported to the OpenBSD project prior to public disclosure. OpenBSD has shipped fixes addressing the issues. The proof-of-concept code and full technical details are now publicly available.

The disclosure highlights the long-term impact of legacy code bugs and the difficulty of hardening kernel protections against sophisticated chained attacks. While the exploit requires local access, its ability to circumvent multiple layers of defense represents a significant concern for OpenBSD deployments.