PS4: TheFlow releases PPPwn, Kernel exploit (Jailbreak) for firmware 11.00

Hacker TheFloW had decided to publish his PS4 Kernel exploit ahead of schedule, and released PPPwn, a kernel exploit for PS4 up to Firmware 11.00 included. The release at this point goes beyond the “proof of concept” level, and technically is a Jailbreak. What’s missing from a user perspective, is for “Custom Firmwares” such as Mira and GoldHEN to be adapted to the new Firmwares, which is most likely a matter of days.

PPPwn is a Jailbreak chain for the PS4 released by TheFloW. It relies on a surprisingly old public vulnerability in one of the FreeBSD Network drivers (sppp). The vulnerability was apparently never patched for PS4, or incorrectly brought back at some point. Details on how the vulnerability impacts the PS4 in particular can be found on hackerone.

Notably, PPPwn is a remote control execution attack, meaning that someone without physical access to the console could technically trigger the exploit by setting up a “malicious” PPPoE endpoint. (They’d still need the target PS4 to actually connect to it though).

Leave a Comment