Apple has patched a non-exploitable programming bug in its flagship macOS Big Sur operating system (OS) that could lead to irretrievable data loss.
Usually, before the OS undergoes a major upgrade, it performs a check for how much free space is available. In versions 11.2 and 11.3 of Big Sur, however, this check doesn't work as intended, according to Mr Macintosh, meaning the upgrade will start even if you have 1% of space left.
This means that the upgrade will start anyway and will saturate users’ hard disk space at 100%, with the installer stuck in a boot loop in an attempt to finish the install.
The problem is exacerbated for Mac devices with the T2 security chip and FileVault 2 encryption enabled. For those with a T2 Mac, they will be unable to get into macOS recovery because their password will not work.
Enabling the hard disk encryption software FileVault locks people out due to a failure to accept their passwords in the normal recovery prompts, the Mac researcher showed.
If FileVault is enabled, users will be prompted to enter their admin password before accessing recover, but it won’t be accepted. If users then try to reset their password with a personal recovery key or AppleID, the reset process will fail. Even Target Disk Mode, which turns the macOS device into an external hard drive for another Mac, will fail.
If upgrading from macOS Sierra or later, macOS Big Sur requires 35.5GB of available storage to upgrade. If upgrading from an even earlier release, macOS Big Sur requires up to 44.5GB of available storage.
The range of available hard drive space where the bug would kick users into a boot loop was between 13GB and 35.5GB of free space. This is according to a deep-dive video compiled by Mr Machintosh breaking down the issue and how it manifests.
Thankfully, Apple has released a fresh installer, macOS Big Sur 11.2.1, which now checks for free space properly before applying any major upgrade to the system.
The issue isn’t a new one, with users reporting problems installing Big Sur as far back as November, losing their data in the process.
-
RSAC Conference 2025: The front line of cyber innovationITPro Podcast Ransomware, quantum computing, and an unsurprising focus on AI were highlights of this year's event
-
Anthropic CEO Dario Amodei thinks we're burying our heads in the sand on AI job lossesNews With AI set to hit entry-level jobs especially, some industry execs say clear warning signs are being ignored
-
Hackers are targeting Ivanti VPN users again – here’s what you need to knowNews Ivanti has re-patched a security flaw in its Connect Secure VPN appliances that's been exploited by a China-linked espionage group since at least the middle of March.
-
Broadcom issues urgent alert over three VMware zero-daysNews The firm says it has information to suggest all three are being exploited in the wild
-
Nakivo backup flaw still present on some systems months after firms’ ‘silent patch’, researchers claimNews Over 200 vulnerable Nakivo backup instances have been identified months after the firm silently patched a security flaw.
-
Everything you need to know about the Microsoft Power Pages vulnerabilityNews A severe Microsoft Power Pages vulnerability has been fixed after cyber criminals were found to have been exploiting unpatched systems in the wild.
-
Vulnerability management complexity is leaving enterprises at serious riskNews Fragmented data and siloed processes mean remediation is taking too long
-
A critical Ivanti flaw is being exploited in the wild – here’s what you need to knowNews Cyber criminals are actively exploiting a critical RCE flaw affecting Ivanti Connect Secure appliances
-
Researchers claim an AMD security flaw could let hackers access encrypted dataNews Using only a $10 test rig, researchers were able to pull off the badRAM attack
-
A journey to cyber resiliencewhitepaper DORA: Ushering in a new era of cyber security
