Julian Oliver@JulianOliver@mastodon.social
Tis the year for kernel vulns, or at least discovering very old ones. Here's an overview of an exploit, its mitigations, atop a 37yr old bug in #OpenBSD
No information disclosure needed. It leans on deterministic kernel memory allocations, scoping therein for function pointers with shared mem attachments to fork until the counter wraps, overflowing to negative integer. Chained w separate out-of-bounds kernel writes, it earns local priv esc to root.
