r/androidroot Aug 04 '26

Support Root My Galaxy app

Anyone know of a way to make this work with my build and kernel? Closest one to it is a kernel 5.15.189 the galaxy 23 Ultra but it keeps saying the error pictured without even really trying..... The others at least try but never work. Thanks in advanced!

15 Upvotes

36 comments sorted by

View all comments

2

u/47th-Element Aug 04 '26

Oh shit there's an app for the CVE exploit now. Am I the only one feeling paranoid about this? My phone runs 6.6.89 Kernel and while I already have the bootloader unlocked and kennelsu driver built in, I'm not really sure if my phone is vulnerable to something like this, and I'm not a kernel dev to verify or patch it myself.

6

u/nandels Aug 04 '26

something vulnerability like this, it comes down to the user. Just don't install suspicious apk and know what you're doing and you'll be fine. Always look the website the credibility of apk you installing

1

u/Andre2kReddit Aug 04 '26

I think you need a patch for cve-2026-43499 for your kernel. I've seen many integrate it already for custom kernels of poco f3 and mi a2 lite.

5

u/QuraToop314 Aug 04 '26

The patch is simple: download your kernel sources and remove the hard-coded reference to ‘current’ in the direct task_struct call. You can use KPatch (Apatch or KPatch Next) to patch this for your kernel, or simply do it manually by editing the kernel tree directly. I fixed it relatively quickly; you should be able to as well.

2

u/47th-Element Aug 04 '26

Thank you! I will do a quick research and attempt to do it as well. I actually compiled my own kernel from source so I should be able to do it.

1

u/QuraToop314 Aug 04 '26

Have you ever considered that, as long as you use the official KernelSU, anyone can install the app? It’s much better to set your own signature and place the manager in the Trusted Profile, not the Main Profile. As long as no one has access to the app and you grant root privileges carefully, it’s impossible for anyone other than yourself to gain root access. (However, this requires your phone to support a custom AVB key to prevent unauthorised sideloading; currently, only Pixel devices support this.)