A new exploit for PS5 firmware 14.20 was apparently discovered a few hours after its rollout, suggesting that it may be possible to jailbreak the latest system software.
Security researcher kuzibelit took to Twitter/X to share that they’ve discovered a new exploit for PS5 firmware version 14.20, the latest system software. They were able to find a userland entry point a few hours after the firmware was released. According to them, Remote Lua Loader is successfully executing payloads live with FTP server when listening on port 1337.
The same hacker was also able to trigger a repeatable kernel panic (system crash) on PS5 firmware 14.10 while testing native userland thread execution via syscall 430 and passing malformed configurations. They’re currently experimenting on this repeatable crash in an attempt to enable memory corruption.
The official patch notes for PS5 firmware 14.20 offer little detail about the changes it brings, saying only that Sony Interactive Entertainment has improved “the messages and usability on some screens.” The update’s release came amid ongoing interest in PS5 security and jailbreak exploits. Recent developments in the PlayStation 5 homebrew scene have focused on vulnerabilities that could allow users to run unauthorised software on consoles running certain firmware versions. The Relapse WebKit and kernel exploit chain enabled jailbreaking on firmware versions up to 13.60. The console maker subsequently released firmware updates 14.00, 14.10, and now 14.20 to address vulnerabilities, with the latter now being a requirement for PlayStation Network access.
Scene developer Gezine has also demonstrated a private, unreleased exploit that apparently unlocks debug settings on PS5 firmware 14.10. They mentioned that the kernel exploit they previously used to achieve the firmware 13.xx jailbreak was patched with firmware 14.00. As far as reading game files from the console memory is concerned, the hacker said that the old method for dumping executables doesn’t work on firmware 14.xx and that a hypervisor exploit may be required to gain access to that functionality.
