I did write a remote kernel exploit for OpenBSD, it was not an easy task, and this was in a time when there were basically no exploit countermeasures in kernel (2007) (<a href="https:&#x2F;&#x2F;www.coresecurity.com&#x2F;content&#x2F;open-bsd-advisorie" rel="nofollow">https:&#x2F;&#x2F;www.coresecurity.com&#x2F;content&#x2F;open-bsd-advisorie</a>)<p>There are a bunch of local kernel exploits, all very practical and reliable. Kernel protections are something OpenBSD lacked until very recently.