EIP-2026-100031
PRE-CVEGoogle Android - Unprotected MSRs in EL1 RKP Privilege Escalation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100031. PoCs published by Google Security Research.
AI-analyzed exploit summary The writeup details a vulnerability in Samsung RKP (Real-time Kernel Protection) where unvalidated MSRs to TCR_EL1 and SCTLR_EL1 registers allow an attacker to bypass memory protections. The issue arises from RKP's failure to validate these registers, enabling manipulation of translation granules or disabling the MMU.
Description
Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation
Exploits (1)
The writeup details a vulnerability in Samsung RKP (Real-time Kernel Protection) where unvalidated MSRs to TCR_EL1 and SCTLR_EL1 registers allow an attacker to bypass memory protections. The issue arises from RKP's failure to validate these registers, enabling manipulation of translation granules or disabling the MMU.