Apple XNU Kernel Type Confusion Vulnerability Allowing Arbitrary Code Execution

A type confusion vulnerability has been identified in the XNU kernel's turnstile management, which could allow a malicious application to execute arbitrary code with kernel privileges. This vulnerability affects multiple Apple operating systems, including macOS Big Sur, High Sierra, Mojave, iOS 12, iOS 14, iPadOS 14, and various versions of watchOS. The issue arises from improper state handling, which has been addressed in the latest updates for each affected platform.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with kernel privileges, potentially allowing for system-level access and control.

Remediation

Users can update to the latest version of macOS, iOS, iPadOS, or watchOS to address this vulnerability. Specific update instructions can be found on the Apple Support website.