Security firm Calif has published a local privilege escalation exploit for OpenBSD 7.9, achieving root access by chaining a 37-year-old integer overflow with a separate kernel flaw. This exploit bypasses OpenBSD’s kernel-address randomization (KARL) and hardware protections like SMAP and SMEP. The detailed write-up and proof-of-concept code were released after OpenBSD shipped fixes, underscoring the longevity of certain vulnerabilities and the complexity of exploit development.