Loading story…
OpenBSD released multiple 7.9 kernel errata addressing security and stability flaws across System V IPC, NFS, ELF execution, and IPsec/IPComp handling. The updates include errata 004, 005, 006, and 007, with fixes for information leaks, kernel crash conditions, locking failures, race conditions, memory leaks, double-free scenarios, and unsafe object lifetime handling. In the ELF subsystem, the patch hardens note parsing, prevents invalid loader states, improves cleanup on exec failure paths, and fixes issues involving pinsyscall(8) and kbind(8).
The SysV IPC fixes harden semaphore, message queue, and shared-memory system calls by adding semaphore reference counting, correcting structure exposure through sysctl, fixing wakeup and receive races, and enforcing safer bounds and allocation behavior, including MSG_NOERROR and sys_shmat() handling. Separate patches repair NFS server request parsing and vnode reference handling to prevent double-free and memory-management bugs, while IPsec/IPComp changes add stricter packet validation and bounds checks in cryptosoft.c, ip_ah.c, and ipsec_input.c to stop kernel crashes. OpenBSD distributed the fixes as signed patches and indicated administrators should apply them through the normal patching process, including kernel rebuilds or supported binary updates.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
OpenBSD published errata 007 for OpenBSD 7.9 to address a kernel crash condition in IPsec and IPComp processing. The fix adds stricter input validation and bounds checks in cryptographic and packet-handling code, including AH headers and decompressed packet sizes.
OpenBSD published errata 006 for OpenBSD 7.9 to fix NFS server bugs involving a double-free, memory leaks, and incorrect vnode reference handling. The patch refactors request parsing and reply-building logic and changes error handling to free request mbufs safely.
OpenBSD published errata 005 for OpenBSD 7.9 to fix numerous problems in System V IPC system call layers affecting semaphores, message queues, and shared memory. The patch adds semaphore reference counting, fixes races and wakeup logic, corrects message handling semantics, and enforces safer bounds and allocation behavior.
OpenBSD published errata 004 for OpenBSD 7.9 to fix multiple kernel-level issues in ELF execution handling, including information leaks, kernel crash conditions, and locking failures involving pinsyscall(8) and kbind(8). The patch also hardens ELF note parsing and improves exec failure-path cleanup.
OpenBSD published the OpenBSD 7.9 errata page, listing available security and reliability fixes and explaining patch distribution through signed diffs, tarballs, and syspatch(8). The page includes errata entries dated June 2, 2026 and July 16, 2026.
An OpenBSD source commit introduced reference counting for System V semaphore kernel objects, adding sem_ref() and sem_rele() helpers and replacing direct freeing logic. The change addresses unsafe lifetime handling during operations such as GETALL, SETALL, IPC_RMID, and blocking semop sleeps.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
6 references tracked. Mallory keeps watching after this page renders.
ftp.openbsd.org
Open sourceftp.openbsd.org
Open sourceftp.openbsd.org
Open sourceftp.openbsd.org
Open sourceopenbsd.org
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
FreeBSD released security updates for **22 vulnerabilities** across the operating system, including multiple flaws that could lead to **remote code execution**, **local privilege escalation to root**, **denial of service**, **memory corruption**, and **information disclosure**. The most severe issue, **`CVE-2026-49420`**, affects `libalias`, where improper handling of **RTSP** traffic during NAT processing can allow **remote code execution as root** on systems using **`ipfw` NAT** or **`natd`**. The fixes were shipped in **FreeBSD 15.1-RELEASE-p1**, **15.0-RELEASE-p11**, **14.4-RELEASE-p7**, and **14.3-RELEASE-p16**. Additional patched components include `execve`, **Jail**, **OpenZFS**, **Linuxulator**, **KTLS**, `sound`, `vt`, `ptrace`, IPv6 multicast filtering, `tcp_rack`, `compat32`, `iconv`, and pathname resolution protections such as **`AT_RESOLVE_BENEATH`**, with the advisory noting that **13 of the issues** could enable privilege escalation to root.
Jul 7, 2026
OpenBSD disclosed a local privilege-escalation vulnerability, tracked as **CVE-2026-57589**, in its System V semaphore implementation. The bug stems from an integer overflow in the `sys_semget()` handler that can lead to kernel memory corruption and allow a local user to escalate privileges to **root** under certain conditions. A fix was committed to **OpenBSD-current**, while patches for stable branches were still pending in the reporting cited. The flaw was reportedly identified during the **Patch the Planet** event focused on AI-assisted vulnerability research, and the same reporting also referenced separate OpenBSD findings affecting **IPsec/IPComp**, **NFS**, and the **pinsyscall** and **kbind** mechanisms.
Jul 16, 2026
Red Hat released **Important** security updates for the Linux kernel across **RHEL 8, RHEL 9, and RHEL 10**, including `kernel-rt` for Real Time deployments, fixing vulnerabilities in core subsystems such as **SMB/CIFS client code, iSCSI target handling, SMC, `sched/psi`, `memfd`, UDF, netfilter, POSIX CPU timers, and AMD GPU drivers**. The advisories cover **nine CVEs in RHEL 8**, **26 CVEs in RHEL 9**, and **24 CVEs in RHEL 10**, with affected offerings spanning standard, Extended Life Cycle, Extended Update Support, SAP, NFV, and CodeReady Linux Builder channels across **x86_64, s390x, ppc64le, and aarch64**. Red Hat said systems should be **rebooted after applying the updates** and reiterated that kernel errata should be treated as security-relevant because of the kernel’s central role. Among the patched flaws, Red Hat detailed **`CVE-2026-53143`**, a **buffer overflow** in the `drm/amdkfd` driver on **GFX11** that could leak or corrupt adjacent GTT memory during CRIU checkpoint and restore operations because SDMA queues used compute-specific handlers with the wrong MQD size. The company also fixed **`CVE-2026-63952`** in **`memfd`**, where writable mappings could persist even when `SEAL_EXEC` implicitly applied `SEAL_WRITE`, weakening the expected write-seal guarantees and undermining **W^X** protections. The RHEL 9 advisory also includes non-security fixes, including a regression in `5.14.0-687.5.1.el9_8` that broke Wi-Fi when **FIPS** was enabled.
Aug 20, 2026