Skip to content

Kernel Patch Protection (KPP)

Max Shavrick edited this page Feb 11, 2016 · 5 revisions

As of iOS9, all arm64 devices have kernel patch protection implemented wherein something likely other than the kernel checks every so often for kernel integrity, otherwise panics.

Information about which ranges it checks –

Information about who does the checking – 

Current attempts to bypass KPP actually avoid it entirely and were demonstrated in Pangu9.

XNU Kernel Exploitation Topics

Clone this wiki locally