Apple RTKit and Kernel Memory Corruption Vulnerability Allowing Bypass of Memory Protections

A memory corruption vulnerability has been identified in the RTKit component of Apple's software, affecting multiple platforms including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. This vulnerability allows an attacker with arbitrary read and write access to kernel memory to potentially bypass kernel memory protections. The issue has been addressed with improved validation. Notably, Apple is aware of reports suggesting that this vulnerability may have been exploited.

Impact

Exploitation of this vulnerability could lead to unauthorized access to kernel memory, allowing an attacker to bypass memory protections and potentially manipulate system processes or data.

Remediation

Users can update to the latest versions of iOS, iPadOS, macOS Monterey, macOS Ventura, macOS Sonoma, tvOS, visionOS, and watchOS to address this vulnerability. Instructions for updating are available on the Apple Support website.