Add firmware 2.50 support #39

Closed

Cr0wTom wants to merge 1 commit from cr0wtom/fw-2.50 into main

Cr0wTom commented

2026-09-01 15:03:45 -05:00

(Migrated from github.com)

Summary

add synchronous firmware 2.50 hypervisor preparation
stage Linux files transactionally in the payload address space
add firmware-specific kernel and L0 handoff code
leave the existing rest-mode paths unchanged

Implementation

Firmware 2.50 does not have the hypervisor vulnerabilities used by the existing firmware paths. This implementation establishes physical access through the existing GPU DMA support and the IOMMU, disables nested paging on all 16 VMCBs, and performs a synchronous kernel-to-L0 handoff.

Testing

Tested on a retail PS5 running firmware 2.50:

hypervisor preparation completed
Linux kernel booted
Ubuntu userspace reached

## Summary - add synchronous firmware 2.50 hypervisor preparation - stage Linux files transactionally in the payload address space - add firmware-specific kernel and L0 handoff code - leave the existing rest-mode paths unchanged ## Implementation Firmware 2.50 does not have the hypervisor vulnerabilities used by the existing firmware paths. This implementation establishes physical access through the existing GPU DMA support and the IOMMU, disables nested paging on all 16 VMCBs, and performs a synchronous kernel-to-L0 handoff. ## Testing Tested on a retail PS5 running firmware 2.50: - hypervisor preparation completed - Linux kernel booted - Ubuntu userspace reached

TheOfficialFloW commented

2026-09-04 11:53:00 -05:00

(Migrated from github.com)