cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU 提权漏洞利用（SM8475 / iQOO Neo8） 针对 CVE-2025-21479 的本地提权实验代码，目标是 vivo V2301A（iQOO Neo8 / PD2301，Snapdragon 8+ Gen 1 / SM8475，Adreno A730，Android 14，GKI 内核 5.10）上的 Qualcomm Adreno GPU（KGSL）。 原理上，漏洞利用通过 KGSL 的 CPSMMUTABLEUPDATE 命令驱动 GPU 的 SMMU， 获得任意物理内存读写 能力，进而关闭...

SELinux-Permissive-Only-CVE-2025-21479

SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 This is an SELinux permissive only version, for now, of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices Some of the code has been recycled from the...

omae-wa-cheese-da

omae-wa-cheese-da Image L/E física arbitraria de GPU CVE-2025-21479 - filtración de KASLR - SELinux permisivo - servidor root de gancho de inicio seguro de RKP & bypass de DEFEX ejecución de binario personalizado LDPRELOAD Tarda unos 6 minutos.. Ten paciencia. Lo optimizaré después. Dispositivos...

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

vivo iQOO Neo 9 Root 研究（CVE-2025-21479） 本项目是基于 CVE-2025-21479 （Qualcomm Adreno A7xx GPU 固件逻辑漏洞）的本地提权研究成果， 目标设备为 vivo iQOO Neo 9 （Snapdragon 8 Gen 2 / Adreno 740 / A7xx 系列 GPU）。 仓库仅保留可直接使用的二进制产物 ：利用程序、KernelSU 内核模块、用户态工具、测试内核模块与对应越狱工具：KSUOneTap的apk。Release主要发布越狱工具。 ⚠️ 免责声明 本项目仅用于安全研究与学习...

CVE-2016-2067

ADRENO GPU IOMMU DMA EXPLOIT Tested under Nexus 6p google/angler/angler:6.0.1/MMB29M/2431559:user/release-keys About the bug Discussed in 2016 via Blackhat EU About the exploit With iommu dma writes, vdso.so is overwritten with shellcode. So after /init executes kernelclockgettime, the shellcode...

cheese-cake

CORREGIR PROBLEMAS :- 1. adaptar a dispositivo Samsung, quizás rama separada, añadir función de encontrar kernel base usando GPU 2. cambiar README 🤝 Contribuciones ¡Las Pull Requests PRs son bienvenidas y muy apreciadas! Ya sean correcciones, mejoras, refactorizaciones o soporte para nuevos...

CVE-2020-11179-Adreno-Qualcomm-GPU

My independent work from the poc created by P0 researcher Ben Hawkes Original article: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html My goal is to convert his poc to C, and continue where he left off and turn the poc into either a root shell, or a kernel r/w, a...

cheese

Exploit de root para Quest 3/3S hasta la actualización del 7 de agosto de 2025 y anteriores, basado en CVE-2025-21479. captura de pantalla de Magisk, Cheese y Termux con una shell de root Advertencia: Rootear es peligroso. Si brickeeas un Quest 3/3S, no hay forma de repararlo. Esto desactiva toda...

cve-2025-21479-iqoo11pro

CVE-2025-21479 临时 Root（iQOO 11 系列） 版本 项目| 值 ---|--- 设备| vivo iQOO 11 Pro（PD2254 / V2254A） 系统| Android 15，PD2254BA15.2.12.2.W10 内核| 5.15.178-g3dc7c01077b8-dirty SoC| Snapdragon 8 Gen 2（SM8550 / kalama） GPU| Adreno 740，OpenGL ES 3.2 [email protected] 已支持机型...

Linux Distros Unpatched Vulnerability : CVE-2026-93060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xxgpuinit The a6xxdestroy function fre...

CVE-2026-93060

This vulnerability affects the Linux kernel DRM MSM Adreno GPU driver, specifically the a6xx_gpu_init() error path. The root cause is a use-after-free : when initialization fails, a6xx_destroy() frees the a6xx_gpu object, leaving adreno_gpu pointing to freed memory. The fix preserves the error co...

EUVD-2026-82170

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xxgpuinit The a6xxdestroy function frees "a6xxgpu" and so "adrenogpu" points to freed memory. Preserve the error code before freeing the memory to avoid a use after free...

CVE-2026-93060 drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xxgpuinit The a6xxdestroy function frees "a6xxgpu" and so "adrenogpu" points to freed memory. Preserve the error code before freeing the memory to avoid a use after free...

lenovo_y700_tb320fc_on_CVE-2025-21479

TB320FC Kernel Root — CVE-2025-21479 English | 简体中文 In-memory kernel privilege escalation for the Lenovo Legion Y700 2023 TB320FC , exploiting CVE-2025-21479 Qualcomm Adreno GPU SMMU vulnerability, with full root management provided by ReSukiSU. No bootloader unlock. No flashing. No PC required f...

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

Neo9Root iQOO Neo9 PD2338C Unlock-Free Caps-Root Tool — Arbitrary physical-write privilege escalation based on CVE-2025-21479 Adreno GPU SDS No bootloader unlock, no flashing, no Magisk required. Achieves kernel-level arbitrary physical write through a GPU vulnerability; after patching key kernel...

The vulnerability of the a6xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a6xx_gpu.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the a6xxgpuinit function in the drivers/gpu/drm/msm/adreno/a6xxgpu.c file of the Direct Rendering Infrastructure DRI driver module in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/msm/adreno: Fixed access to a null pointer in adrenogpucleanup Fixed the kernel panic caused by accessing a null pointer: 18.504431 Unable to handle a NULL pointer derefrence at the virtual address 0000000000000048 18.5134...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 T...

SUSE CVE-2026-64049

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Before a5xx Adreno driver will not try fetching UBWC params because those generations didn't support UBWC anyway, however it's still possible to query UBWC-related params...

SUSE CVE-2026-64154

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xxgpuinit In a6xxgpuinit, node is obtained via ofparsephandle. While there was a manual ofnodeput at the end of the common path, several early error returns would bypass this call,...