Twistedvoxel Sony Patches Critical PS5 Kernel Vulnerability Amid New Exploit Reports
Article Content
- •Firmware version 14.20 patches a critical kernel vulnerability in PS5.
- •The 'Prolapse' exploit affects system software versions 14.00 and 14.10.
- •A new userland entry point was reportedly found shortly after the firmware release.
Sony has released firmware version 14.20 for the PlayStation 5, addressing a critical kernel vulnerability known as 'Prolapse.' This vulnerability affects system software versions 14.00 and 14.10, allowing potential compromise of the console. The public exploit tool, 'Relapse,' previously supported up to version 13.60, but the new exploit expands the range of affected versions. Users are advised to block updates to maintain the ability to run unsigned software, although doing so will restrict access to PlayStation Network services. Following the release of firmware 14.20, a security researcher claimed to have found a userland entry point on the console, demonstrating the potential for a new jailbreak. The latest firmware update 26.07-14.22.00 was released shortly after, but details on the vulnerabilities addressed were not disclosed. The PS5's hardware hypervisor remains a barrier to executing unsigned code, limiting the impact of the newly discovered exploit.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
Which PS5 firmware versions are affected?
What should users do to protect their consoles?
Is there a working exploit available now?
Continue Reading
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25… 
Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…