Description
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | watchOS | unspecified – < 8.3 | 8.3 |
| Apple | iOS and iPadOS | unspecified – < 15.2 | 15.2 |
| Apple | macOS | unspecified – < 12.1, unspecified – < 15.2 | 12.1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 7 repositories
-
b1n4r1b01/desc_race ★ 271 · Mar 1, 2022
iOS 15.1 kernel exploit POC for CVE-2021-30955
-
markie-dev/desc_race_A15 ★ 48 · Mar 14, 2022
CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)
-
GeoSn0w/Pentagram-exploit-tester ★ 19 · Mar 18, 2022
A test app to check if your device is vulnerable to CVE-2021-30955
-
verygenericname/CVE-2021-30955-POC-IPA ★ 3 · Feb 28, 2022
https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa compiled into a ipa 15.0-15.2b1
-
nickorlow/CVE-2021-30955-POC ★ 1 · Feb 28, 2022
Jake Jame's proof of concept wrapped into an iOS app for CVE-2021-30955
-
st-rnd/desc_race-1 ★ 0 · Mar 24, 2022
desc_race exploit for iOS 15.0 - 15.1.1 (with stable kernel r/w primitives) (CVE-2021-30955)
-
timb-machine-mirrors/jakeajames-CVE-2021-30955 ★ 0 · Feb 28, 2022
Clone from gist
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2026-0631 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 5, 2026
- WID-SEC-2022-0489 Apple iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 5, 2026