Sony just can't catch a break: a new exploit Byepervisor Reborn has been released for PS5, opening up prospects for Linux and unlicensed applications

One of the hackers' previous achievements was the Relapse exploit, introduced in September. It combined a browser vulnerability with kernel access and an ELF loader, providing a publicly available exploitation path for firmware 13.60.

The Byepervisor Reborn hypervisor exploit has been released for PlayStation 5. For now, the development is exclusively aimed at developers and does not represent a ready-made jailbreak for ordinary users.

According to the project documentation on GitHub, the exploit uses a vulnerability in the console's recovery mechanism after exiting rest mode. It allows access to the hypervisor's address space and disables XOM memory protection, after which it becomes possible to create a system kernel dump and make changes to it.

Image source: Unsplash

Byepervisor Reborn does not include patches for running unlicensed applications and other necessary components that would allow turning the exploit into a full-fledged solution for users. The developers explicitly warn that the current version is only a basis for further research and experimentation.

Currently, support for PS5 firmware 13.60 and 13.20 is declared. The project also includes a configuration for version 13.00, but it has not yet been tested. Although the underlying vulnerability of the exploit could potentially be relevant for older firmware, starting from the 6.xx line, this does not mean that the current implementation fully works on all these versions.

The developers also admit the possibility of adapting the solution for firmware 14.00, but there is no ready-made implementation yet. In addition, there is no publicly available kernel exploit for this version, which complicates further work.