Sony PS5 got cracked (jailbroken)

DanielBowman

DanielBowman

Sony PS5 got cracked (jailbroken).
What does it mean or could mean for FreeBSD?
PS5 is on version 11, tho.
And this particular exploit is about...in short:
WebKit gives you controlled memory corruption in the browser sandbox → that leaks a kernel address → the kernel UAF race turns it into full kernel read/write.
Click to expand...

It is quite spectacular - you can download any game for free, even emulators for Nintendo and XBox and Windows and the games for it. And you can run PS2 and PS3 DVDs.

For Sony and customers it means:
Even harder push to cloud gaming.
 
Well, how can webkit cause something that goes all the way into kernel memory? There are several bugs missing in that chain.
 
This might be an interesting use:
github.com

GitHub - cobanov/PS5LM: llama.cpp on a jailbroken PS5: run any GGUF model natively on the console, starting with Qwen 3.8

llama.cpp on a jailbroken PS5: run any GGUF model natively on the console, starting with Qwen 3.8 - cobanov/PS5LM
github.com github.com

cracauer@ said:
Sure. But once you are in the browser how do you cross into the kernel?
Click to expand...
This might have details:
github.com

GitHub - Cryptogenic/PS5-IPV6-Kernel-Exploit: An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW - Cryptogenic/PS5-IPV6-Kernel-Exploit
github.com github.com
 
You must log in or register to reply here.
Back
Top