Sony has patched a critical kernel vulnerability in PlayStation 5 firmware version 14.20.

The console security community has disclosed information a new kernel exploit, codenamed "Prolapse," being developed for PlayStation 5 gaming consoles. According to the information released, this vulnerability allows for the compromise of console system software versions 14.00 and 14.10. The public solution, Relapse, only supported system software up to and including build 13.60, so the discovered flaw significantly expands the range of platform versions under investigation. Currently, the technical details and working code for the Prolapse exploit have not been made publicly available, remaining in closed, private benchmarks for a select group of individuals.

Sony quickly responded to the discovered vulnerability and patched the kernel vulnerability underlying the tool in system update 14.20. This means that consoles with the latest firmware installed are fully protected from this attack vector. Users planning to run unsigned software or expand their console's system capabilities in the future are advised to temporarily block firmware updates and stay on releases 14.00 or 14.10. Failure to update will prevent access to PlayStation Network online services, forcing owners to choose between online access and maintaining the potential for device hacking.

Even if private benchmarks are successfully completed and a kernel exploit is published, a full-fledged hack of the console remains impossible. The main obstacle to executing unsigned code and running backup copies of games remains the PlayStation 5's built-in hardware hypervisor, whose protective barriers have yet to be breached on current versions of the system. Without bypassing the system hypervisor, enthusiasts are severely restricted in their rights and cannot modify critical levels of the operating system. Thus, the revelation of the Prolapse exploit is an important step for the scene, but it does not yet indicate the imminent release of a working hack.