Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100056. PoCs published by Google Security Research.
AI-analyzed exploit summary The writeup details a vulnerability in Samsung KNOX's RKP hypervisor where certain memory regions are incorrectly marked as RWX in both stage 1 and stage 2 translation tables, allowing arbitrary code execution in EL1. The issue arises due to mismatched protection ranges between the kernel text region and the broader reserved physical address range.
Description
Google Android - RKP EL1 Code Loading Bypass
Exploits (1)
The writeup details a vulnerability in Samsung KNOX's RKP hypervisor where certain memory regions are incorrectly marked as RWX in both stage 1 and stage 2 translation tables, allowing arbitrary code execution in EL1. The issue arises due to mismatched protection ranges between the kernel text region and the broader reserved physical address range.