CVE-2023-41981

Vulnerability

The vulnerability is a kernel memory handling issue in Apple operating systems that allows an attacker to bypass kernel memory mitigations. It affects macOS Ventura before 13.6, tvOS before 17, iOS/iPadOS before 16.7 and 17, watchOS before 10, and macOS Sonoma before 14 [1][2][3][4].

Exploitation

An attacker must first achieve kernel code execution through other means. Once that is accomplished, this vulnerability can be exploited to bypass kernel memory protections. No additional user interaction is required for the bypass step.

Impact

Successful exploitation allows an attacker who already has kernel code execution to bypass kernel memory mitigations, potentially enabling further compromise of the system's security.

Mitigation

Apple fixed the issue in the following releases: macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, and macOS Sonoma 14 [1][2][3][4]. No workarounds are available.