Why it is trending
CVE-2026-43499
kernel: rtmutex: Use waiter::task instead of current in remove_waiter()
- CVSS 8.5
- Public PoC
- Buzz
- 25discussion, 0-100
- Danger
- 39exploitability, 0-100
- Mentions
- 230since 8 Jul 2026
- EPSS
- 0.8%exploit probability
- GitHub175 mentions · 173 voices · 172 PoC
- X27 mentions · 18 voices
- Reddit1 mentions · 1 voices
- Dark web27 mentions · count only
Out of 230 mentions in total. We show how many, never what was said or where.
X
Porting GhostLock (CVE-2026-43499) to the Samsung Galaxy A17: KDP, DEFEX, and the art of not panicking Read on dbugs: https://t.co/FDo9p0TDX3 Researchers at Mobile Hacking Lab adapted the public CVE-2026-43499 GhostLock chain to a stock Samsung Galaxy A17 ("SM-A175F") running "GKI 6.12.23-android16…
GhostLock (CVE-2026-43499) is changing Android rooting: temporary root + KernelSU without unlocking the bootloader. Latest device support, ports, and what’s working: https://t.co/0AILaHIRGT #AndroidRoot #GhostLock #KernelSU
@dcolascione @Momoko_Ayase in reality, people get root via kernel LPEs (e.g. CVE-2026-43499) on firmware. Secure boot actually backfires here by vouching for a compromised device.
AI bug-hunter (Nebula’s VEGA) just found a use-after-free in the Linux futex priority-inheritance code that’s been sitting there since 2.6.39 (2011). CVE-2026-43499, aka GhostLock, lets any local user hit root and escape containers. 97% exploit reliability. Google paid $92,337 via kernelCTF. Ubuntu…
@Brosianes 对了 解 bl 比 root 难度高一级 如果是没社区搞过的新手机的话 先尝试 root 吧 主要看看 cve-2026-43499 和 43284 ……
🔴 POCO M7 Plus 5G için CVE-2026-24088 tabanlı jailbreak/root PoC'si yayınlandı! Qualcomm ABL/GBL'deki bir güvenlik açığından yararlanan PoC ile bootloader kilidi açılmadan geçici root erişimi elde edildiği raporlandı. 📌 CVE: CVE-2026-24088 📌 SoC: Snapdragon 6s Gen 3 (SM6375) 📌 Etkilenen katman: Qua…
@fahadalijaved @drimtiyaz39 @thatjoshguy69 @SamMobiles @UniverseIce @wr3cckl3ss1 @FrankOneDigital I wanted to root my S22 ultra but couldn't find the IonStack CVE-2026-43499 from the github thread
Google paid $7,500 : then closed it "Won't Fix (Infeasible)." The forged Pixel photo still verifies as camera-original. Pixel C2PA / StrongBox confused deputy - keys never leave Titan M2. Root doesn't need them. keystork impersonates Pixel Camera → StrongBox signs attacker bytes → Adobe Inspect + C…
@corndogjpn2 不出意外是 CVE-2026-43499
Ionstack (CVE-2026-43499) vs The Humane Ai Pin... Let's see. 👨💻⛓️💥
GitHub
k-o-n-t-o-r/ghostlock-sm-g990b: GhostLock CVE-2026-43499 root exploit for Samsung SM-G990B G990BXXSLIZH2
WJNKAC/CVE-2026-43499-OPPO-A5-PBBT30: 在 AI 帮助下利用 ghostlock 提权 oppo a5 pbbt30 至 root
shangu2003/SamsungRootKit: Offline Android root toolkit for Samsung Galaxy (S23-S26 / Z Flip / Z Fold / Tab S9 Ultra). DF chain (DirtyFrag) first, auto-fallback to the SRK chain (CVE-2026-43499, firmware-matched payloads), then DFReroot persistence. KernelSU & KernelSU-Next. For security research o…
M3E114514/M3-Neo10-Root-ADB-OS6: iQOO Neo10 (PD2425) 免解BL锁临时Root一键工具(电脑ADB版,基于 GhostLock / CVE-2026-43499)
Romk-a/CVE-2026-43499-ghostlock-vivo-x100-ultra-root: GhostLock: Android kernel root exploit for Vivo X100 Ultra (PD2366) via CVE-2026-43499 PI-futex race. KernelSU integration with vr.ko anti-root bypass.
Escosis/V2463A-LPE: 基于 CVE-2026-43499 的锁屏界面自动提权工具,面向 iQOO Neo10 Pro+ 及相同芯片(骁龙8e)相同系统版本(OriginOS 6)设备
AuroraMythweaver/iqoo-neo9-ghostlock-pc: GhostLock (CVE-2026-43499) PC-side driver for iQOO Neo9 (PD2338): boot-window campaign over adb, temporary root via KernelSU late-load. One bash script + one payload pack.
Venshell/hlk-al00-kernel-build: HLK-AL00 (4.14.116 / Kirin 810) 内核云编译 — CVE-2026-43499 授权安全研究
MSEDGE-CORE/GhostLock-HonorFne: Honor 70 (FNE-AN00) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading
saltlyfish666/magicpad3-root-research: 荣耀 MagicPad3 (CGA-W00) 运行时 KernelSU Root 研究 —— 全自动提权循环 · 二进制补丁增强 · 社区方案深度逆向 | Runtime KernelSU root research (CVE-2026-43499)
Recently graduated, now tasked with porting a kernel exploit. How do I approach this? — Hey everyone, I graduated last year with a Bachelor's degree in Computer Science, and my current job requires me to port Ghostlock (CVE-2026-43499) to multiple android devices. Honestly, a lot of it currently go…
- github.com/k-o-n-t-o-r/ghostlock-sm-g990bGitHub · 7 h ago
- github.com/WJNKAC/CVE-2026-43499-OPPO-A5-PBBT30GitHub · 17 h ago
- github.com/shangu2003/SamsungRootKitGitHub · 3 d ago
- github.com/M3E114514/M3-Neo10-Root-ADB-OS6GitHub · 4 d ago
- github.com/Romk-a/CVE-2026-43499-ghostlock-vivo-x100-ultra-rootGitHub · 4 d ago
- github.com/Escosis/V2463A-LPEGitHub · 4 d ago
- github.com/AuroraMythweaver/iqoo-neo9-ghostlock-pcGitHub · 6 d ago
- github.com/Venshell/hlk-al00-kernel-buildGitHub · 7 d ago
- github.com/MSEDGE-CORE/GhostLock-HonorFneGitHub · 8 d ago
- github.com/saltlyfish666/magicpad3-root-researchGitHub · 8 d ago
Links are collected from public posts and are not reviewed by Brandefense. Exploit code can be unsafe or malicious: only study it in an isolated lab, and never run it against systems you do not own.
Get a morning brief and an alert the moment a critical vulnerability like this one starts trending.
Subscribe