⬇ Download holy card: ·
Saint Landa, Hunter of Physical Pages
Patron of page tables, dangling pointers, and patiently built jailbreaks.
Life
The third and last of the methods collected by felix-pb in the kfd project, Landa (CVE-2023-41974) was a use-after-free in Apple's XNU kernel. An app inside its own sandbox could keep hold of physical memory pages the kernel believed it had already freed: a "physical use-after-free" that leads all the way to reading and writing kernel memory. Apple fixed it in iOS 17 and macOS 14, and the bounty was 70,000 dollars.
Prayer
O Saint Landa, who holds on to the pages the kernel has already let go, teach us to let go as well. Amen.
How to celebrate
Celebrated by updating to iOS 17 and, for once, giving back everything you borrowed.
A freed page is not a forgotten page.