Apple Begins Warning Users That 'Legacy System Extensions' Won't Work With a Future Version of macOS

Apple has shared a new support document that indicates kernel extensions — which it calls "legacy system extensions" — will not be compatible with a future version of macOS because they "aren't as secure or reliable as modern alternatives."

System extensions are a category of software that works in the background to extend the functionality of your Mac. Some apps install kernel extensions, which are a kind of system extension that works using older methods that aren't as secure or reliable as modern alternatives. Your Mac identifies these as legacy system extensions.

Starting in macOS 10.15.4, released this week, a warning will now appear when a kernel extension first loads, and again periodically while the extension remains in use. Users began noticing the warning during beta testing.


Apple says it began informing developers that macOS Catalina will be the last macOS to fully support kernel extensions in 2019, adding that it has been working with developers to transition their software. A final transition date has not yet been set, but some developers are assuming that kernel extensions will be deprecated in macOS 10.16.

Apps with kernel extensions will continue to work in macOS Catalina.

"By moving beyond these extensions, developers are helping to further modernize the Mac, improve its security and reliability, and enable more user-friendly software distribution methods," the support document reads.

One affected app is Malwarebytes, which said that "a significant percentage of our total support case volume" was related to the new kernel extension warning less than 24 hours after the public release of macOS 10.15.4.


Malwarebytes director Thomas Reed said Apple has a new EndpointSecurity framework as a replacement for kernel extensions:

We are aware of this, and have been working on replacing our kernel extension since late last year. We plan to replace it with Apple's new EndpointSecurity framework before the release of macOS 10.16, when it is assumed that kernel extensions will no longer work, in part or in full. (We only know that Apple has said they "will not work without compromise" in "a future version of macOS." But we'd rather not find out the hard way exactly what that means.)

The kernel extension will continue to be supported for macOS 10.14 (Mojave) and earlier, but macOS 10.15 (and later) will no longer need it, once we have an update available.

So, no need to panic. We've still got your back, and won't let your protection falter. All you've got to do is make sure you're keeping Malwarebytes for Mac up-to-date. If you have updated to at least version 4.2, and have not disabled the new auto-update feature, it'll update itself in the background without you needing to do anything. To ensure you're up-to-date, just open Malwarebytes and choose Check for Updates from the Malwarebytes menu.

Technical details for developers are available in an Apple document titled "Deprecated Kernel Extensions and System Extension Alternatives."

Related Roundup: macOS Catalina

Top Rated Comments

(View all)
Avatar
10 weeks ago


It's nothing to do with security.

"Sandboxing software is nothing to do with security"

You heard it here first folks. ?
Score: 18 Votes (Like | Disagree)
Avatar
10 weeks ago


It's nothing to do with security.

It's specifically about stability and also security.
The new system extensions will not have sufficiently low level access to the system to cause kernel panics. That's a big improvement regardless of the motivation.
Score: 17 Votes (Like | Disagree)
Avatar
10 weeks ago
It's nothing to do with security. It's about total control of the hardware & software experience, like on iOS.

They've been doing it slowly but surely over the last number of years.
Score: 15 Votes (Like | Disagree)
Avatar
10 weeks ago


It's nothing to do with security. It's about total control of the hardware & software experience, like on iOS.

They've been doing it slowly but surely over the last number of years.

making drivers run in user space is absolutely about security.
Score: 9 Votes (Like | Disagree)
Avatar
10 weeks ago


"Sandboxing software is nothing to do with security"

You heard it here first folks. ?

So it is just a coincidence that the method of improving security they chose and continue to implement just happens to also reduce user control and limit how the machine can be used, right? I bet you think they removed the headphone jack out of courage too.
Score: 7 Votes (Like | Disagree)
Avatar
10 weeks ago


So it is just a coincidence that the method of improving security they chose and continue to implement just happens to also reduce user control and limit how the machine can be used, right? I bet you think they removed the headphone jack out of courage too.

It's not a coincidence, it's computer science. The more control you let a third-party app have over things outside it's own user space, the more likely it is to cause system instability and to present a security risk.
Score: 6 Votes (Like | Disagree)

Top Stories

Five Mac Apps Worth Checking Out - June 2020

Tuesday June 2, 2020 2:25 pm PDT by
Apps developed for the Mac often don't receive as much coverage as apps designed for iPhones and iPads, so we have a series at MacRumors that highlights interesting Mac apps that are worth taking a look at. This month's apps are designed to make working from home a little bit easier. Subscribe to the MacRumors YouTube channel for more videos. Meeter (Free) - Working from home often...

iPhone 13 Prototype Mockup Depicts Notch-Free Design and USB-C Port

Thursday June 4, 2020 10:07 am PDT by
We still have a few months to go before Apple unveils the iPhone 12, but rumors about the iPhone 13, coming in fall 2021, are already circulating. Japanese site Mac Otakara today shared a rough 3D printed mockup of a 5.5-inch iPhone said to be coming in 2021, which is from "Alibaba sources." The model may be built on leaked specifications and rumors, but where the info comes from is unclear. ...

iPad Pro With A14X Chip, 5G, and Mini-LED Display Expected in First Half of 2021

Wednesday June 3, 2020 6:22 am PDT by
Apple plans to launch new iPad Pro models with an A14X chip, 5G connectivity, and a Mini-LED display in the first or second quarter of 2021, according to the increasingly reliable Twitter account L0vetodream. The leaker claims that the new iPad Pro models will be equipped with Qualcomm's Snapdragon X55 modem, which supports both mmWave and sub-6GHz. mmWave is a set of 5G frequencies that...

Apple's First MacBook Pro With a Retina Display Will Become 'Obsolete' in 30 Days

Monday June 1, 2020 7:50 am PDT by
If you are still hanging on to a Mid 2012 model of the 15-inch MacBook Pro with a Retina display, and require a new battery or other repairs, be sure to book an appointment with a service provider as soon as possible. In an internal memo today, obtained by MacRumors, Apple has indicated that this particular MacBook Pro model will be marked as "obsolete" worldwide on June 30, 2020, just over...

$5 Billion Lawsuit Accuses Google of Tracking Chrome Users in Incognito Mode

Wednesday June 3, 2020 3:13 am PDT by
A proposed class action lawsuit in the U.S. has accused Google of violating federal wiretap laws by tracking the online activities of users when in Incognito mode. According to Reuters, the class action argues that by surreptitiously collecting information about what people view online and where they browse when they use Chrome's private browsing mode, Google has been intentionally deceiving...

Next iPad Air Could Feature a USB-C Port Instead of a Lightning Port

Tuesday June 2, 2020 8:30 pm PDT by
The fourth-generation iPad Air may be equipped with a USB-C port instead of a Lightning port, according to a new report from Japanese site Mac Otakara that says the information comes from a Chinese supplier. Apple transitioned to USB-C for its iPad Pro models in 2018, but other iPads have continued to feature a Lightning port for charging purposes. Mac Otakara says that the new iPad Air will ...

Next Apple Pencil Could Be Released in Black

Tuesday June 2, 2020 10:25 am PDT by
The next iteration of the Apple Pencil could be available in black for the first time, according to leaker Mr. White who shared the tidbit on Twitter this morning. A mockup of an Apple Pencil in black We haven't heard rumors of a next-generation Apple Pencil and it's not clear when a new model might be released. Apple is rumored to be working on mini-LED versions of the iPad Pro, and it's...

Apple's Stock Price Hits a New All-Time High [Updated]

Friday June 5, 2020 7:06 am PDT by
Roughly four months after hitting an all-time high just before financial markets and economies faltered in the face of the current public health crisis, Apple's stock price has returned to those levels and has set a new all-time high today. Apple's previous intraday high of $327.85 was set on January 29, and that high-water mark was surpassed just a few minutes ago as it hit $328.00 before...

Code in iOS 13.5.5 Suggests Apple is Working on Services Bundle

Wednesday June 3, 2020 5:04 pm PDT by
Rumors have suggested Apple is working on a services bundle that will offer multiple Apple services like Apple TV+ and Apple Music for one flat monthly rate, and according to 9to5Mac, code found in iOS 13.5.5 seemingly confirms Apple's bundle plans. Files in iOS 13.5.5 reference a "bundle offer" and a "bundle subscription," and these files weren't in earlier versions of iOS. The files are...

Deals: Get the Limited Edition Mac Bundle With 11 MacOS Apps Including Parallels Desktop for $54

Wednesday June 3, 2020 6:46 am PDT by
At StackSocial this week you can get the Limited Edition Mac Bundle featuring Parallels Desktop for a low price of $54 with the promo code RUMORS10. This new bundle features 11 total apps for macOS, including Parallels Desktop, TextExpander, PDF Expert, and more. Note: MacRumors is an affiliate partner with StackSocial. When you click a link and make a purchase, we may receive a small payment, ...