XNU vm_map_copy Optimization Issue

XNU vm_map_copy optimization which requires atomicity is not atomic. This violates the semantics of mach message OOL memory, and leads to TOCTOU issues which can lead to memory corruption.

MD5 | de2284e251a10f0384f76a0857085c48

Download

Source: packetstormsecurity.com