Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Calif details a patched OpenBSD local-root bug tracing to a 37-year-old shared-memory counter.
Stories per day · 30 days
1 RSS
Relatedprivilege-escalation2calif1coordinated-disclosure1integer-overflow1kernel1linux1lix1nix1openbsd1
7 stories, newest first · one card per story
Stories tagged #local-root
Nix and Lix: multiple vulnerabilities leading to local root privilege escalation - October 2026
Nix and Lix disclosed combinable flaws that can escalate local users to root via their daemons.
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
An oss-security reply discusses packaging limits around four named Linux local root vulnerabilities.
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-security thread proposes hashing sorted Module.symvers CRCs under CONFIG_MODVERSIONS to fix four Linux local root vulnerabilities without breaking module ABI.
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-security follow-up on four Linux local root vulnerabilities—DirtyAH6, PPPoEject, TUNderflow, DiagSpill—debates distribution-specific patching challenges.
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Follow-up on four Linux local root vulnerabilities dubbed DirtyAH6, PPPoEject, TUNderflow, and DiagSpill, advising kernel attack surface reduction as mitigation.
USN-8753-1: libinput vulnerability
Ubuntu patches libinput flaw letting local attackers inject udev properties and execute arbitrary code as root.