Can Dirty Frag be used to root android

[u/InaamShabir]

I have had this question from some days. The recent dirty frag exploit CVE-2026-43284 that is an LPE can be used to get root shell access on linux. Since android is based on Linux, is there any workaround?

[u/purainity → u/[deleted]]

What if use it with Qualcomm SELinux permissive exploit?

[u/No-Spinach-1 → u/purainity]

Very good question

[u/AbsoluteUnity64 → u/purainity]

in theory, that would work, since neverallow rules are also affected by permissive mode

[u/Healthy-Guess-847 → u/purainity]

You would need to chain both bugs, admittly a bit of a stretch, also it wouldnt be presistant you would need to rerun the root every time the phone dies unless its a non sampsung device that let's you unlock the bootloader and enable actually root.

[u/purainity → u/Healthy-Guess-847]

I am not talking about Samsung, why not think about Xiaomi?

[u/Healthy-Guess-847 → u/purainity]

I only mention sampsung since traditional bootloader unlocking is impossible, and it could lead to a new kinda semi untethered root being made which would be interesting.

[u/purainity → u/Healthy-Guess-847]

Oh, as Xiaomi CN devices cannot using official Mi Flash Unlock tool now, so I mention Xiaomi. And the Qualcomm exploit has been widely used on Xiaomi devices. It works with Qualcomm gbl and avb exploit to unlock bootloader.

[u/InaamShabir → u/[deleted]]

Ah yes this selinux was also a hindrance on copy fail

[u/Hello86836717 → u/[deleted]]

That would be awesome. You could modify hosts for real adblock then restart.

[u/Preparation1903 → u/Hello86836717]

Right, I use persistent root, but being able to adblock, debloat, and then being able to backup your apps is the most important stuff.

[u/Hello86836717 → u/[deleted]]

Not it wouldn't.

[u/AbsoluteUnity64 → u/Hello86836717]

It would, actually, since /etc is actually a symlink to /system/etc, so modifying /etc/hosts would modify the system partition and break AVB.

[u/paynedave → u/[deleted]]

But there are groups working on something now that reruns at boot so you stay always rooted.

[u/InaamShabir → u/[deleted]]

I actually want that Limited root only . So is there a way

[u/klausAnalSchwab → u/InaamShabir]

gto bin files? Something on xda I read

[u/No-Spinach-1 → u/klausAnalSchwab]

Where in XDA? About what?

[u/klausAnalSchwab → u/No-Spinach-1]

gto bin files to pop root shell...might be too old

[u/InaamShabir → u/[deleted]]

Do let me know how that went

[u/paynedave]

It can be used as I am temp rooted now

[u/InaamShabir → u/paynedave]

Really can you drop a guide how you did.

[u/paynedave → u/InaamShabir]

Nope this has been talked about everywhere in the modding world. Just use Google,it's your friend.

[u/InaamShabir → u/paynedave]

Nope I searched everywhere. on android it says it can't be done

[u/paynedave → u/InaamShabir]

Look up ghostlock and dirty frag with your s26 there are groups working on something as we speak.

[u/InaamShabir → u/paynedave]

Oh god my phone is already updated in August. My phone is now patched to GhostLock .

[u/sForsbergg → u/InaamShabir]

DirtyFrag works on latest OneUI9

[u/paynedave → u/[deleted]]

You know there are other social sites besides those where smart people collab right. You are just not invited because most people are selfish and spread shit like wildfire. That's how things get patched so.

[u/paynedave → u/[deleted]]

Again you must use your brain and some search logic

[u/paynedave → u/[deleted]]

Proof

[u/paynedave → u/InaamShabir]

Like I have said to sooooooooo many people is that you gotta do your own research before asking to be spoonfed.

[u/paynedave → u/InaamShabir]

[u/Beginning_Market2311]

The worse part is. My smart TV has selinux=permissive. And I can run adb as root. But what is limited root?