cheese

Root exploit for the Quest 3/3S for the August 7, 2025 update and earlier, based on CVE-2025-21479. screenshot of Magisk, Cheese, and Termux with a root shell 경고: 루팅은 위험합니다. Quest 3/3S를 벽돌로 만들면 복구 방법이 없습니다. 이것은 임시 루트 상태에서 모든 보안을 비활성화합니다. 신뢰하지 않는 앱을 실행하거나 웹사이트를 탐색하지 마십시오. 부트 파티션 또는 시스템 파티션에 쓰지 마십시...

CVE-2020-11179-Adreno-Qualcomm-GPU

My independent work from the poc created by P0 researcher Ben Hawkes Original article: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html My goal is to convert his poc to C, and continue where he left off and turn the poc into either a root shell, or a kernel r/w, a...

CVE-2016-2067

ADRENO GPU IOMMU DMA 익스플로잇 테스트 환경: Nexus 6p google/angler/angler:6.0.1/MMB29M/2431559:user/release-keys 버그 정보 2016년 Blackhat EU에서 논의됨 익스플로잇 정보 iommu dma 쓰기를 사용하여 vdso.so를 셸코드로 덮어씁니다. 따라서 /init이 kernelclockgettime을 실행한 후 셸코드가 실행됩니다. /init 프로세스는 이후 루트 셸로 연결됩니다. 로그 Reverse shell target: 127.0.0.1:49...

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

vivo iQOO Neo 9 Root 研究（CVE-2025-21479） 本项目是基于 CVE-2025-21479 （Qualcomm Adreno A7xx GPU 固件逻辑漏洞）的本地提权研究成果， 目标设备为 vivo iQOO Neo 9 （Snapdragon 8 Gen 2 / Adreno 740 / A7xx 系列 GPU）。 仓库仅保留可直接使用的二进制产物 ：利用程序、KernelSU 内核模块、用户态工具、测试内核模块与对应越狱工具：KSUOneTap的apk。Release主要发布越狱工具。 ⚠️ 免责声明 本项目仅用于安全研究与学习...

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

Neo9Root iQOO Neo9 PD2338C 잠금 해제 불필요 Caps-Root 도구 — CVE-2025-21479 Adreno GPU SDS 기반 임의 물리 쓰기 권한 상승 방안 Bootloader 잠금 해제, 플래싱, Magisk가 필요 없습니다. GPU 취약점을 통해 커널 수준 임의 물리 쓰기 를 획득하고, 커널 주요 함수를 패치한 뒤 전체 권한41-bit caps 으로 상주하는 root daemon이 되어 rootc / su에 root 능력을 제공합니다. 핵심 특징 : euid를 2000으로 유지하여 vivo vr....

cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU 提权漏洞利用（SM8475 / iQOO Neo8） 针对 CVE-2025-21479 的本地提权实验代码，目标是 vivo V2301A（iQOO Neo8 / PD2301，Snapdragon 8+ Gen 1 / SM8475，Adreno A730，Android 14，GKI 内核 5.10）上的 Qualcomm Adreno GPU（KGSL）。 原理上，漏洞利用通过 KGSL 的 CPSMMUTABLEUPDATE 命令驱动 GPU 的 SMMU， 获得任意物理内存读写 能力，进而关闭...

cheese-cake

수정할 사항 :- 1. 삼성 기기에 맞게 조정 별도 브랜치, GPU로 커널 베이스 찾는 기능 추가 2. README 변경 🤝 기여하기 Pull RequestsPR를 환영하며 대단히 감사합니다! 버그 수정, 개선, 리팩토링, 새로운 기기 지원 등 무엇이든 자유롭게 기여해 주세요. 🚧 프로젝트 상태 이 프로젝트는 아직 진행 중WIP입니다. 다음 내용도 추가할 예정입니다: 다음을 포함합니다: 구현에 영감을 준 익스플로잇이나 기술을 연구한 연구자 코드가 적용, 참조 또는 수정된 개발자 오프셋, 패치 또는 기기별 데이터를 제공한 커뮤니...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/msm/adreno: Fixed null pointer access in adrenogpucleanup Fixed the kernel panic caused by null pointer access: 18.504431 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048 18.513464 Mem...

The vulnerability of the a6xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a6xx_gpu.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the a6xxgpuinit function in the drivers/gpu/drm/msm/adreno/a6xxgpu.c file of the Direct Rendering Infrastructure DRI driver module in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

CVE-2025-21479 – Qualcomm Adreno GPU privilege escalation vuln...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

Neo9Root iQOO Neo9 PD2338C Unlocked Without Unlocking –...

CVE-2026-64154

A flaw was found in the Linux kernel's Adreno graphics processing unit GPU driver. This vulnerability occurs in the a6xxgpuinit function, where a device node reference is not properly released under certain error conditions. This oversight can lead to a gradual accumulation of unreleased resource...

CVE-2026-64049

A flaw was found in the Linux kernel's Adreno Graphics Processing Unit GPU driver. This vulnerability allows a local user to trigger a system crash by querying unsupported Universal Bandwidth Compression UBWC parameters from userspace. This can lead to a Denial of Service DoS, making the system...

CVE-2026-64154

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xxgpuinit In a6xxgpuinit, node is obtained via ofparsephandle. While there was a manual ofnodeput at the end of the common path, several early error returns would bypass this call,...

PT-2026-61366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can be triggered in the adreno get param function when userspace queries UBWC-related parameters on a2xx-a4xx Adreno drivers. This occurs because these hardwar...

Elysium-Vanguard-Honor-Tool-Kit

🌌 Elysium Vanguard Honor Tool Kit: TITAN v13.0 Hardware-B...

UBUNTU-CVE-2025-71103

In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferencing ifpcreglist when not declared On plaforms with an a7xx GPU not supporting IFPC, the ifpcreglist if still deferenced in a7xxpatchpwrupreglist which causes a kernel crash: Unable to handle kernel NU...

Linux Distros Unpatched Vulnerability : CVE-2023-54199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/adreno: Fix null ptr access in adrenogpucleanup Fix the below kernel panic due to null pointer access: 18.504431 Unable to handle kernel NULL pointer...

CVE-2023-54199

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix null ptr access in adrenogpucleanup Fix the below kernel panic due to null pointer access: 18.504431 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048 18.513464 Mem abort inf...

SUSE CVE-2023-54199

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix null ptr access in adrenogpucleanup Fix the below kernel panic due to null pointer access: 18.504431 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048 18.513464 Mem abort inf...