Device lockout delay via passcode attempt logic

Improper authentication in the Apple operating-system kernel allows malicious apps to trigger escalating lockout delays via passcode attempts. The kernel's passcode-attempt state logic permits an app to submit entries against a locked device and increases the delay after four failures; Apple has not disclosed the specific state transition or validation error. Execution of a malicious app is required, and repeated failed entries prolong access delays without a published claim of passcode bypass or data access.