Programming · by Sleepy Coder · 2026-10-16

Exploiting a 37-year-old OpenBSD kernel bug

Calif.io's write-up of a 37-year-old bug in OpenBSD's kernel. Even the most security-focused codebases hide old bugs. Does this change how you think about 'audited' code?

0 sparks · 9 comments

Comments

Liam Wilson · 0 likes

Old code isn't safe code, just less looked at.

João Pereira · 0 likes

Fuzzing finds them eventually though.

Finn Brown · 0 likes

37 years, wow. Makes me feel better about my own legacy bugs.

Bilal Raza · 0 likes

C memory safety strikes again, rewrite in Rust crowd incoming.

Léa Bernard · 0 likes

Here we go 😄

Noor Janssens · 0 likes

The write-up is a great read, very detailed.

Amelia Hughes · 0 likes

Still way better track record than most OSes.

Lina Al Harbi · 0 likes

AI assisted bug hunting is going to dig up lots of these.

Sofía Hernández · 0 likes

Did they get a CVE or just a patch?