Mali Pagecache Root - Autonomous root for TCL Android TV via CVE-2022-22706
Mali Pagecache Root is a firmware-specific rooting toolkit for the TCL QLED 50C721 Android TV (Realtek RTD1319). It exploits CVE-2022-22706, a Mali GPU page-cache write vulnerability, to achieve uid=0 from an unprivileged app context in under two seconds. The autonomous binary chains the exploit with direct credential modification, SELinux permissive mode, ad-blocking, debloat, and automated backups. Scripts enable ADB-based tethered rooting and post-root data preservation. This is not a universal root tool; it targets one tested firmware and includes detailed compatibility and recovery notes for researchers and owners of the specific hardware.
The autonomous root binary achieves uid=0 from an unprivileged app context in under 2 seconds.
- shakna
Always good to see progress towards people getting to own their own hardware.
> MIT for all original code. The kernel excerpt (kernel/mem.c) retains its GPL-2.0 license and copyright notices.
One small tweak needed here.
GPL 2.0? Has this bit:
> You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.
"under the terms of [this License]."
It is viral. Copying the code, and distributing it, as done here, means that GPL 2.0 is meant to apply to everything. The only carveout, is if your code didn't depend on the kernel excerpt at all. But... It does.
> If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission.
- Hydraulix989
I should just be able to have root on the TV that I bought and paid for and own.
- pessimizer
I've been hearing that AI is a security armageddon, it's about time we realized that it's the means for a rebirth of the ancient art of rooting sleazy devices.
I bet AI could help us to keep the updates rooted, too. To lock out the manufacturers and to update some IoT garbage to work locally. And to port some drivers.