Someone just broke the M5 kernel and published the how
The first public kernel memory corruption exploit for Apple's M5 chip dropped today. No zero-day trading, just research in the open.
A security researcher named Calif just published the first public kernel memory corruption exploit for Apple’s M5 chip. Not a theoretical vulnerability. A working proof-of-concept that corrupts kernel memory on macOS running M5 hardware. This matters because Apple Silicon has been a fortress for three chip generations. The M1, M2, M3, and M4 all had public exploits eventually, but they took months or years to surface. The M5 launched in March 2026. It is May. Someone cracked kernel memory in eight weeks. The exploit targets a specific memory allocator bug in the M5’s custom memory controller. Calif did not burn a zero-day for bug bounty cash. They published the technique, the proof-of-concept code, and the analysis. The post walks through the memory layout quirks that make M5 different from M4, and why those quirks opened a new attack surface. Apple will patch this fast. The interesting part is not the vulnerability lifetime. It is the research velocity. Kernel exploits on new Apple hardware used to be the domain of nation-state teams and exploit brokers. Now someone with a blog and an M5 DevKit is publishing them before the chip hits most retail SKUs. The security model is not broken. But the idea that new silicon buys you six months of obscurity is gone. If you are building detection systems that assume M5 kernels are invulnerable until late 2026, rewrite that assumption today.
Source: First public macOS kernel memory corruption exploit on Apple M5