Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Calif details a patched OpenBSD local-root bug tracing to a 37-year-old shared-memory counter.
58
- Mentions · 7d0
- Mentions · 30d2
- All mentions5
- First seenSep 18, 2026
- Last mentioned26d ago
Timeline
5 articles · newest first37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released
Researchers released a patched OpenBSD local root exploit chaining a 37-year-old shared-memory bug.
62
OpenBSD Developers Reject Uutils Coreutils
OpenBSD developers, including Theo de Raadt, rejected a uutils coreutils port over licensing, Rust, and compatibility concerns.
28
A Recycled File Descriptor: CVE-2026-103547 in OpenBSD's ldapd
OpenBSD ldapd CVE-2026-103547 let a remote client inherit another connection's LDAP Bind via a recycled file descriptor.
61
sudo and OpenDoas timestamp files (2020)
A 2020 write-up demonstrates reusing sudo timestamp files across SSH sessions for passwordless sudo, fixed via session-leader start times.
30
Related CVEs
by mentions- In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP child process client…
Appears with
- OpenBSDproduct · 3
- Califorganization · 2
- OpenBSDvendor · 2
- sudoproduct · 1
- OpenDoasvendor · 1
- ldapdproduct · 1
- GNU coreutilsproduct · 1
- doasproduct · 1
- Canonicalorganization · 1
- sudovendor · 1
- uutilsorganization · 1
- Bettag Systemsorganization · 1
- uutils coreutilsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.