EIP-2026-100031

The writeup details a vulnerability in Samsung RKP (Real-time Kernel Protection) where unvalidated MSRs to TCR_EL1 and SCTLR_EL1 registers allow an attacker to bypass memory protections. The issue arises from RKP's failure to validate these registers, enabling manipulation of translation granules or disabling the MMU.