2026-05-15 00:43 UTC
Daring Fireball reported on a new macOS root exploit from Calif:
https://daringfireball.net/linked/2026/05/14/m5-mie-exploit
https://blog.calif.io/p/first-public-kernel-memory-corruption
Their demo video has:
errno=72(expected) feature=1
That’s EBADRPC,
So it’s in NFS, and is likely not exploitable on iOS, which doesn’t have NFS. Aww.
Replies (1)
-
@zhuowei@notnow.dev 2026-05-15 01:43
(I did shove xnu's NFS server and NFS client kext into an LLM, and it didn't find any bugs. So the actual bug might not be in NFS - maybe they're just using NFS as part of the exploit?)