EIP-2026-104544

This exploit targets a vulnerability in OpenBSD's semget() system call, where insufficient sanity checks on the user-supplied nsems value allow kernel memory corruption. The PoC manipulates kernel parameters to bypass limits and trigger the vulnerability.