Show HN: Autonomous root for Tcl Android TV via CVE-2022-22706

Category: security

Tags: android, exploitation, security-research, gpu, arm, kernel, cve

Score: 6.8/10 (Innovation: 7, Technical: 9, Documentation: 8, Utility: 3)

A firmware-specific root exploit chain for a TCL Android TV that chains CVE-2022-22706 (Mali GPU page-cache write) with a natural __cxa_atexit trigger to disable SELinux and gain uid=0 via a /dev/rtkmem physical-memory kernel task_struct walk. Technically deep Android/kernel exploitation research with well-documented stages and recovery notes, but strictly limited to one model/firmware with no fresh test and no prebuilt APK wrapper.

Target audience: security researchers and Android exploit developers

Repository: https://gitlab.com/c4psu13/mali-pagecache-root

View on Hacker News