Get the latest tech news
Susctl CVE-2024-54507: A particularly 'sus' sysctl in the XNU kernel
A very sus sysctl in the XNU kernel.
Every time Apple releases a new version of XNU, I run a custom suite of tests under an address sanitizer to see if I can spot any regressions, or even possibly new bugs. When writing a SYSCTL_PROC, you are responsible for validating user requests, updating the kernel state, and returning values to userspace. Even though the authors were careful to prevent integer overflows, information leakage was still possible due to the initial 4-byte load.
Or read this on Hacker News
