Skip to content

kernel: Explicitly check zygote start in execve hook (https://github.com/tiann/KernelSU/pull/3113)#1038

Merged
rifsxd merged 1 commit into
KernelSU-Next:devfrom
pershoot:dev1
Jan 1, 2026
Merged

kernel: Explicitly check zygote start in execve hook (https://github.com/tiann/KernelSU/pull/3113)#1038
rifsxd merged 1 commit into
KernelSU-Next:devfrom
pershoot:dev1

Conversation

@pershoot

@pershoot pershoot commented Jan 1, 2026

Copy link
Copy Markdown
Collaborator

kernel: Explicitly check zygote start in execve hook (tiann/KernelSU#3113)

Author: Wang Han 416810799@qq.com (aviraxp)
Date: Thu Jan 1 20:26:25 2026 +0800

The assumption that first app_process is zygote is fragile. Take the following scernio into account:

  1. User updates from KSU 1.0 to 3.0, with lsposed installed 2) User doesn't know how to install lkm via manager, find a friend to patch init boot for him
  2. Next boot, old ksud reports post-fs-data done with prctl, new kernel doesn't know it, so throne tracker is not triggered 4) app_process logic gets triggered when lsposed executes lspd 5) Task work is bound to lspd's parent, which is a sh instead of init, and it has already exited
  3. User has no root

While this commit can fix it, it is strictly recommend that ksud version should be greater than or equal to kernel version.

…3113)

The assumption that first app_process is zygote is fragile. Take the
following scernio into account:

1) User updates from KSU 1.0 to 3.0, with lsposed installed
2) User doesn't know how to install lkm via manager, find a friend to
patch init boot for him
3) Next boot, old ksud reports post-fs-data done with prctl, new kernel
doesn't know it, so throne tracker is not triggered
4) app_process logic gets triggered when lsposed executes lspd
5) Task work is bound to lspd's parent, which is a sh instead of init,
and it has already exited
6) User has no root

While this commit can fix it, it is strictly recommend that ksud version
should be greater than or equal to kernel version.
@rifsxd rifsxd merged commit 5bd34a4 into KernelSU-Next:dev Jan 1, 2026
17 of 18 checks passed
pershoot pushed a commit that referenced this pull request Jan 1, 2026
…3113) (#1038)

The assumption that first app_process is zygote is fragile. Take the
following scernio into account:

1) User updates from KSU 1.0 to 3.0, with lsposed installed
2) User doesn't know how to install lkm via manager, find a friend to
patch init boot for him
3) Next boot, old ksud reports post-fs-data done with prctl, new kernel
doesn't know it, so throne tracker is not triggered
4) app_process logic gets triggered when lsposed executes lspd
5) Task work is bound to lspd's parent, which is a sh instead of init,
and it has already exited
6) User has no root

While this commit can fix it, it is strictly recommend that ksud version
should be greater than or equal to kernel version.
@pershoot pershoot deleted the dev1 branch January 1, 2026 14:35
maxsteeel pushed a commit to maxsteeel/KernelSU-Next that referenced this pull request Feb 1, 2026
…3113) (KernelSU-Next#1038)

The assumption that first app_process is zygote is fragile. Take the
following scernio into account:

1) User updates from KSU 1.0 to 3.0, with lsposed installed
2) User doesn't know how to install lkm via manager, find a friend to
patch init boot for him
3) Next boot, old ksud reports post-fs-data done with prctl, new kernel
doesn't know it, so throne tracker is not triggered
4) app_process logic gets triggered when lsposed executes lspd
5) Task work is bound to lspd's parent, which is a sh instead of init,
and it has already exited
6) User has no root

While this commit can fix it, it is strictly recommend that ksud version
should be greater than or equal to kernel version.
maxsteeel pushed a commit to maxsteeel/KernelSU-Next that referenced this pull request Feb 1, 2026
…3113) (KernelSU-Next#1038)

The assumption that first app_process is zygote is fragile. Take the
following scernio into account:

1) User updates from KSU 1.0 to 3.0, with lsposed installed
2) User doesn't know how to install lkm via manager, find a friend to
patch init boot for him
3) Next boot, old ksud reports post-fs-data done with prctl, new kernel
doesn't know it, so throne tracker is not triggered
4) app_process logic gets triggered when lsposed executes lspd
5) Task work is bound to lspd's parent, which is a sh instead of init,
and it has already exited
6) User has no root

While this commit can fix it, it is strictly recommend that ksud version
should be greater than or equal to kernel version.
rifsxd pushed a commit that referenced this pull request Feb 2, 2026
…3113) (#1038)

The assumption that first app_process is zygote is fragile. Take the
following scernio into account:

1) User updates from KSU 1.0 to 3.0, with lsposed installed
2) User doesn't know how to install lkm via manager, find a friend to
patch init boot for him
3) Next boot, old ksud reports post-fs-data done with prctl, new kernel
doesn't know it, so throne tracker is not triggered
4) app_process logic gets triggered when lsposed executes lspd
5) Task work is bound to lspd's parent, which is a sh instead of init,
and it has already exited
6) User has no root

While this commit can fix it, it is strictly recommend that ksud version
should be greater than or equal to kernel version.
hakuna77 pushed a commit to hakuna77/KernelSU-Next that referenced this pull request Feb 3, 2026
…3113) (KernelSU-Next#1038)

The assumption that first app_process is zygote is fragile. Take the
following scernio into account:

1) User updates from KSU 1.0 to 3.0, with lsposed installed
2) User doesn't know how to install lkm via manager, find a friend to
patch init boot for him
3) Next boot, old ksud reports post-fs-data done with prctl, new kernel
doesn't know it, so throne tracker is not triggered
4) app_process logic gets triggered when lsposed executes lspd
5) Task work is bound to lspd's parent, which is a sh instead of init,
and it has already exited
6) User has no root

While this commit can fix it, it is strictly recommend that ksud version
should be greater than or equal to kernel version.
ThRE-Team pushed a commit to ThRE-Team/KernelSU-Next that referenced this pull request Feb 12, 2026
…3113) (KernelSU-Next#1038)

The assumption that first app_process is zygote is fragile. Take the
following scernio into account:

1) User updates from KSU 1.0 to 3.0, with lsposed installed
2) User doesn't know how to install lkm via manager, find a friend to
patch init boot for him
3) Next boot, old ksud reports post-fs-data done with prctl, new kernel
doesn't know it, so throne tracker is not triggered
4) app_process logic gets triggered when lsposed executes lspd
5) Task work is bound to lspd's parent, which is a sh instead of init,
and it has already exited
6) User has no root

While this commit can fix it, it is strictly recommend that ksud version
should be greater than or equal to kernel version.
Mr-Morat added a commit to Mr-Morat/KernelSU-Next that referenced this pull request Feb 17, 2026
slipzryzens pushed a commit to slipzryzens/KernelSU-Next that referenced this pull request Feb 17, 2026
ahmedhanbal added a commit to ahmedhanbal/KernelSU-Next that referenced this pull request Feb 24, 2026
Mr-Morat added a commit to Mr-Morat/KernelSU-Next that referenced this pull request Feb 26, 2026
Mr-Morat added a commit to Mr-Morat/KernelSU-Next that referenced this pull request Feb 28, 2026
ThRE-Team pushed a commit to ThRE-Team/KernelSU-Next that referenced this pull request Mar 5, 2026
slipzryzens pushed a commit to slipzryzens/KernelSU-Next that referenced this pull request Mar 7, 2026
Mr-Morat added a commit to Mr-Morat/KernelSU-Next that referenced this pull request Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants