ghostlock-app

GhostLock-App 中文 GhostLock uses CVE-2026-43499 to gain temporary root on supported Android kernels and load KernelSU. Use the app 1. Install a root manager APK from KernelSU, BakaSU/ReSukiSU, or KowSU. 2. Install the GhostLock APK and open it. 3. Check that your kernel is supported, then tap Run...

ghostlock

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

cve-2026-43499

GhostLock Exploitation Failure Summary on PD2229 SM8475, 5.10.233 GKI I. Vulnerability and Device Facts 1.1 CVE-2026-43499 GhostLock Basic Information Item| Value ---|--- Vulnerability Type| Stack Use-After-Free in the rtmutex / futex PI path Introduced Version| Linux 2.6.39-rc1 May 2011, commit...

CVE-2026-43499-poc

Weaponisation research for CVE-2026-43499 ghostlock. the rtmutex removewater proxy path bug that leaves a tasks piblockedon dangling into its own popped kernel stack frame. The bug class and original exploit strategy credit to nebusec their write-up here everything in this repo is my own...

RootMyVivo

RootMyVivo Root for vivo and iQOO phones with a locked bootloader. No unlocking, no flashing — install the APK, press the button, wait. Built on GhostLock CVE-2026-43499, a use-after-free in futex PI plus KernelSU installed on top of the temporary root. Русский · 中文 How it goes 1. Install the APK...

QuestStack

QuestStack QuestStack is a Meta Quest root and bootloader unlocking project. Using the GhostLock privilege escalation chain and the CVE-2021-1931 ABL/fastboot vulnerability, QuestStack provides a way to gain root access on the latest Quest 1 firmware, temporarily boot using a vulnerable ABL, and...

ghostlock-oppo-watch3pro

GhostLock CVE-2026-43499 — OPPO Watch 3 Pro Complete Research Case Complete exploitation research on CVE-2026-43499 GhostLock, rtmutex/futex-PI stack UAF on the OPPO Watch 3 Pro OWW211, ColorOS Watch China version, Android 11, ARM32. Final conclusion: the chain-walk write mechanism crashes on...

s26-m1q-ghostlock-selinux

S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU activation achieved 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ Final result: uid=0 root + KernelSU activatio...

CVE-2026-43499_OPPO-MT6835

CVE-2026-43499 / GhostLock PoC for OPPO MT6835 This repository preserves a compact research snapshot for the GhostLock-style exploit chain targeting an OPPO MT6835-based device. Scope Exploit source tree under exploit Minimal proof-of-concept under poc Supporting analysis notes and build artifact...

humane-aipin-ghostlock

GhostLock for Humane AI Pin GhostLock for Humane AI Pin is an open-source, boot-scoped root proof of concept for one exact retail firmware build. It exercises CVE-2026-43499, a Linux rtmutex use-after-free, from an ordinary authorized ADB shell. The runner is deliberately narrow. It checks the...

ghostlock-kit

GhostLock Kit — vivo iQOO Neo9S Pro V2339FA / MT6989 GhostLock one-click root kit for the vivo iQOO Neo9S Pro V2339FA, MediaTek MT6989. This repository contains: MCAST transport porting patch , one-click scripts, and full analysis documentation; for the complete runnable kit including binaries an...

ghostlock-k419-adapter

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploit for OnePlus/OPPO/realme devices with locked bootloader. Achieves root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...

ghostlock-x200-root

GhostLock-X200 v1.3.5 ⚠️ Legal and Safety Notice Please Read First This repository is intended solely for security research and educational purposes , and may only be used on devices that you own or for which you have obtained explicit written authorization. Using this tool on others' devices...

ghostlock-s26

GhostLock - Android wrapper indev.ghostlock.s26 One-click Android wrapper for polygraphene/ghostlock-s26: GhostLock CVE-2026-43499 ported to the whole Samsung Galaxy S26 series Android 16 / GKI 6.12. One APK, three kernel lines, runtime parameter matching - no per-build app variants. Use only on...

GhostLock

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

rmx3888-cve-2026-43499-config

CVE-2026-43499 Exploit Configuration for realme RMX3888 Device Information Brand/Model : realme RMX3888 Android Version : 16 SDK 36 Build ID : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Architecture : ARM64 aarch64 Overview This...

ghostlock-aak-apk

GhostLock AAK Launcher CVE-2026-43499 · Linux kernel rtmutex stack Use-After-Free local privilege escalation LPE loader/trigger This repository is a security research and proof-of-concept PoC project , used to demonstrate and verify the trigger flow of the CVE-2026-43499 GhostLock vulnerability i...

ghostlock-x200-app

GhostLock X200 App Current release: 1.1.0. Download release · Changelog A one-tap on-device root App for vivo X200 , based on the GhostLock CVE-2026-43499 kernel vulnerability: no flashing, no bootloader unlocking, no data wiping. After running, you get temporary root , which is lost after a...

Exploit for Use After Free in Linux Linux_Kernel

Sony Xperia 1 VI — One-Shot Root GhostLock Root exploit for...

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro Linux kernel privilege escalation exploit attempt based on CVE-2026-43499 GhostLock — Huawei Watch 4 Pro MDS-AL00, armv7l Project Overview This project is a GhostLock kernel vulnerability exploit attempt targeting the Huawei Watch 4 Pro MDS-AL00...