A counter that has been a signed 16-bit short since 1988 gives root on OpenBSD, and the exploit needed no information leak
2026-10-17Security
Calif published a working local root chain for OpenBSD 7.9 with KARL, SMAP and SMEP all enabled. The 37-year-old integer is the headline. The part that should worry people is why no address had to be leaked first.