---
id: 8737
title: "Race you to the kernel!"
source_domain: projectzero.google
source_url: "https://projectzero.google/2016/03/race-you-to-kernel.html"
published_at: "2016-03-22T00:00:00Z"
tags: ["privilege-escalation", "ios", "kernel", "race-condition", "osx", "setuid"]
phying_url: "https://phying.com/item/8737"
lang: en
---

# Race you to the kernel!

## Summary

A race condition in OS X and iOS setuid binary loading leaves a short window to manipulate the memory of an euid 0 process, potentially gaining entitlements and loading unsigned kernel extensions.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2016-03-22T00:00:00Z
- **Original:** https://projectzero.google/2016/03/race-you-to-kernel.html
- **Phying News:** https://phying.com/item/8737