A race condition exists in macOS kernel memory handling that allows a remote user to trigger unexpected system termination or corrupt internal kernel memory. The flaw arises from insufficient locking around concurrent access to shared resources, leading to improper ordering of operations in the kernel. The impact is limited to system stability and integrity, with no direct effect on data confidentiality.

Apple macOS systems are affected, specifically macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Users running earlier releases of these macOS versions are vulnerable until they upgrade to the specified fixed builds.

The CVSS score of 9.8 indicates a high severity for kernel memory corruption and denial of service. The EPSS score of less than 1% indicates a very low probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is remote; exploitation would require triggering the concurrency flaw, likely by sending crafted input to a vulnerable component over the network. No public exploitation method has been disclosed, so the risk is primarily theoretical, but the potential impact justifies immediate patching.