CVE-2026-43499-root-KernelSU

CVE-2026-43499-root-KernelSU A local privilege escalation adaptation based on kernel vulnerability CVE-2026-43499, with embedded KernelSU integrated. It compiles to produce preload.so; upon successful exploitation, KernelSU will be started in late-load mode jailbreak mode. Supports generating...

CVE-2026-43499-Redmi-Turbo5

CVE-2026-43499 Exploit for Redmi Turbo 5 This preload library is built from the duchamp-root source code. ⚠️ WARNING: For educational and authorized security research purposes only. This repository provides a proof-of-concept exploit for CVE-2026-43499 GhostLock targeting the Xiaomi Redmi Turbo 5...

root-my-s24

RootMyS24 Root without unlocking · Samsung Galaxy S24 series S9210 / S9260 / S9280 + China Z Fold6 A security research project built on kernel vulnerability CVE-2026-43499 English · 简体中文 · 繁體中文（台灣） · 繁體中文（香港） Security research notice: This project is intended solely for security research and the...

pixel-ksu-root

pixel-ksu-root Root a stock, locked-bootloader Google Pixel from an unprivileged adb shell, using a kernel CVE — no unlock, no flash, no vendor help. A userspace-reachable kernel bug yields a short-lived read/write primitive. That primitive is spent late-loading a KernelSU module into the running...

Root-My-Galaxy

Root My Galaxy Root My Galaxy is a one-click installer for explicitly supported Samsung model and kernel combinations. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build artifacts. Latest release The device feed and native payloads are...

s9180-rootmygalaxy

RootMyGalaxy for Galaxy S23 Ultra SM-S9180 / FZG1 针对 三星 Galaxy S23 Ultra（SM-S9180） 的 RootMyGalaxy 移植与增强版本发布仓库。 基于上游 BuSung-dev/Root-My-Galaxy 的 v0.2.36，针对 S9180ZHS8FZG1 固件完成适配，并提供内嵌 KernelSU v3.3.0 的增强变体。 ⚠️ 本仓库所有版本均为「内存态临时 root」 ：不刷写任何分区、不解锁 bootloader、不触发 Knox e-fuse ，重启后 root 失效，手机恢复完全原厂状态。 📦...

ghostlock-app

GhostLock-App 中文 GhostLock uses CVE-2026-43499 to gain temporary root on supported Android kernels and load KernelSU. Use the app 1. Install a root manager APK from KernelSU, BakaSU/ReSukiSU, or KowSU. 2. Install the GhostLock APK and open it. 3. Check that your kernel is supported, then tap Run...

Root-My-Device

Root My Device A fork of BuSung-dev/Root-My-Galaxy, under the Apache License 2.0 — see LICENSE and Credits. Root My Device is a one-click installer for explicitly supported firmware builds. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build...

CVE-2026-43499-A36

CVE-2026-43499-A36 Standalone, device-tested CVE-2026-43499 port for the Canadian Galaxy A36 5G SM-A366W on exact firmware A366WVLS3AYG1, including KernelSU late-load and Root My Galaxy integration. This repository contains the device-specific native side of Root My Galaxy: exact firmware profile...

meizu21-ghostlock-root

MEIZU 21 GhostLock Root Runtime root for the MEIZU 21 with a locked bootloader, based on GhostLock / CVE-2026-43499. This repository contains only the device-specific offsets, the prebuilt ARM64 payload, and scripts required to reproduce the setup. It does not contain Flyme OTA packages, boot.img...

Root-My-Galaxy-Payloads

Root My Galaxy Payloads This repository contains the device-specific native side of Root My Galaxy: exact firmware profiles and offsets; the app-domain CVE-2026-43499 exploit source and compiled payload; the app bootstrap helper source; the verified KernelSU late-load build artifacts; the support...

iqoo-temp-root

vivo/iQOO Temporary Root Toolkit No bootloader unlocking, no flashing needed, temporary root lost on reboot. Core principle: CVE-2026-43499 futex PI UAF kernel exploit + temporary KernelSU loading. Supported devices App version Device| Codename| Payload ---|---|--- iQOO Z10 Turbo| z10t / iqooz10t...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q Bootloader-Unlock-Free KernelSU Root CVE-2026-43499 temporary root → LDPRELOAD channel bypasses DEFEX → non-LTO clang-12 build of kernelsu.ko → full su + KernelSU Manager functionality Status: ✅ Verified on real device on 2026-08-12 firmware F9360ZCSAIZF1, kernel...

RootMyVivo

RootMyVivo Root for vivo and iQOO phones with a locked bootloader. No unlocking, no flashing — install the APK, press the button, wait. Built on GhostLock CVE-2026-43499, a use-after-free in futex PI plus KernelSU installed on top of the temporary root. Русский · 中文 How it goes 1. Install the APK...

GhostLock-Galaxy

GhostLock-Galaxy 中文: READMEZH.md This is a separate repository because this route requires Android shell permission, obtained through adb shell or Shizuku. The original YuKongA/ghostlock-app does not use shell permission and follows a different execution route; its requirements and code path shou...

root-s24-e1s

Root S24 e1s / S921BXXSDCZB2 Per-boot local root on Galaxy S24 SM-S921B firmware S921BXXSDCZB2 kernel 6.1.138-android14-11, then late-load KernelSU Next so com.rifsxd.ksunext reports Working LKM. Not affiliated with Root My Galaxy. No GitHub payload feed, no multi-device catalog. One firmware,...

K50G-POCOF4GT-CVE-2026-43499-PoC

Redmi K50 Gaming ingres — CVE-2026-43499 GhostLock Temporary Root PoC One-click temporary Root without unlocking BL. Uses the GhostLock CVE-2026-43499, futex PI Use-After-Free local privilege escalation chain to obtain a root anchor, then mounts the kernelsu module into the running kernel via...

CVE-2026-43499-For-Xiaomi-17T-chagall

CVE-2026-43499-For-Xiaomi-17T-chagall CVE-2026-43499 reproduce in Xiaomi 17T. tested on .307 version,it got fixed when I upgraded to A17 which also upgraded to 6.6.118-android15-8-gc4127a25dcf3-ab158633 37-4k so not working...

Root-My-Galaxy-S938B

Root My Galaxy — S938B Root My Galaxy is a firmware-profiled installer for temporary KernelSU root on supported Samsung builds. This fork is maintained for the Galaxy S25 Ultra SM-S938B running: Build: BP4A.251205.006.S938BXXSBCZG3 Kernel: 6.6.98-android15-8-pd6ff1cd-abogkiS938BXXSBCZG3-4k Downlo...

ghostlock-k419-adapter

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploit for OnePlus/OPPO/realme devices with locked bootloader. Achieves root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...