🚨WebGPU Shader Hangs Macs, Demanding Restart
A WebGPU shader can now crash Macs, forcing a restart
TL;DR
A new WebGPU shader can crash Macs, making the desktop UI unusable until a restart. The issue reproduces cross-browser on MacOS but not on other OSes. Apple is yet to address this security flaw.
A WebGPU shader on an untrusted site can hang a Mac's graphics, making the desktop UI unusable until a restart is forced. This issue reproduces cross-browser on MacOS but not on other operating systems. The shader uses an infinite busy loop in WebGPU, causing the WindowServer to become unresponsive, leading to a kernel panic and a forced restart. This isn't the first time Apple has faced such issues; a similar shader named ShadyShader was reported in 2023. Apple responded to ShadyShader with CVE-2023-40441 but has yet to take action on the new deathray. The issue was disclosed on July 27, 2026, and Apple initially planned to fix it but later deemed it a non-issue. The shader's potential to be used in non-malicious ways, such as in video games, complicates the security landscape.
Key Points
WebGPU shader hangs Macs, making desktop UI unusable until restart; issue reported on July 27, 2026.
Shader uses an infinite busy loop in WebGPU, causing WindowServer to become unresponsive, triggering kernel panic.
Similar issue with ShadyShader in 2023 led to CVE-2023-40441; Apple's response to new shader was delayed.
Apple initially planned to fix the issue but later deemed it a non-issue, sending it to another team for consideration.
Shader's potential for non-malicious use complicates security landscape; Apple needs better GPU pre-emption for untrusted code.
Why It Matters
If you're developing web applications that use WebGPU, this shader vulnerability could affect your users' experience. The infinite loop in the shader can cause system crashes, impacting usability. Apple's delayed response highlights the need for better pre-emption mechanisms for untrusted code.
Frequently Asked Questions
Why does this matter?
If you're developing web applications that use WebGPU, this shader vulnerability could affect your users' experience. The infinite loop in the shader can cause system crashes, impacting usability. Apple's delayed response highlights the need for better pre-emption mechanisms for untrusted code.
What happened?
A new WebGPU shader can crash Macs, making the desktop UI unusable until a restart. The issue reproduces cross-browser on MacOS but not on other OSes. Apple is yet to address this security flaw.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,475 builders reading daily.