The fix is iOS 12.5.5, which Apple's advisory points out also addresses arbitrary code execution flaws in WebKit and CoreGraphics.
Next, the kernel flaw's also present in older versions of iOS, and impacts the iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad Mini 2, iPad Mini 3, and iPod Touch. Thanks to Apple for getting patch out so quickly. We saw this used in conjunction with a N-day remote code execution targeting WebKit. Here's what one Googler had to say about it:Ġday privilege escalation for macOS Catalina discovered in the wild by The fix is Security Update 2021-006 Catalina, which Macs should be urging peeps to install as you read this article – making this the rare occasion on which it might be best to put down The Register and move on to that task.
