The Patching Friars' AlmanacA calendar of CVE saints

March 16

MacDirtyCowHoly card for macdirtycow, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 RO MacDirtyCow VACCA SORDIDA MALI
🤖 Image and text generated with AI

⬇ Download holy card: ·

☀ Commemorated today: The Miracle of Rustock's Silence (2011)

Embed on your site

Saint MacDirtyCow, Cousin of the Dirty Cow

Patron of protected system files, shared memory pages, and those who customise iPhones without a jailbreak.

Life

CVE-2022-46689, found by Ian Beer of Google Project Zero, is a race condition in Apple's kernel, a relative of Linux's Dirty COW. Apple fixed it in late 2022 in iOS 15.7.2 and 16.2 and the matching macOS releases; by March 2023 the exploit was well known. It let an unprivileged process write, for an instant, into shared read-only memory pages, and it was used to alter system files on iPhones without a jailbreak.

Prayer

O Saint MacDirtyCow, who writes for an instant where it is forbidden, teach the kernel not to share what must stay unchanged. Amen.

How to celebrate

Celebrated by updating to iOS 15.7.2 or 16.2 and the matching macOS releases, in memory of those who changed their fonts without asking.

Dirty cow, a page written on the sly.

Technical record

Disclosed on
March 16 2023
CVE
CVE-2022-46689
CVSS
7.0
Product
Apple · macOS

A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.

Sources: project-zero.issues.chromium.org · web.archive.org · support.apple.com

Commemorated today

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.