OpenBSD erratum 040:
2017-08-27

SMAP enforcement could be bypassed by userland code.

binpatch60-(amd64|i386)-kernel-22.0.tgz