Two Bugs With One PoC: Rooting Pixel 6 From Android 12 to Android 13

on YouTube ↗38m

" summary

Covers rooting Google Pixel 6 devices (running Android 12 and Android 13) that use the Google-designed Tensor chip and Linux 5.10 kernel by reusing an older, publicly known vulnerability already exploited in the wild. Describes the attack surface characteristics on Pixel 6 and provides a step-by-step walkthrough of creating a proof-of-concept exploit that chains the two bugs to achieve root.

AI-written summary · about

" related talks

• 16mPixel 6 support on androidmainlineWilliam McVicker, Peter Griffin · Linux Plumbers Conference 2023
• 15mPixel 6 support upstream and on android-mainlineWilliam McVicker · Linux Plumbers Conference 2025
• 30mCode AOSP: No time to EOL (die)James Gatt · AndroidMakers by droidcon 2024
• 27mBad io_uring: A New Era of Rooting for AndroidKang Li, Xinyu Xing, Zhaofeng Chen, Zhenpeng Lin · Black Hat USA 2023
• 42mThe Hidden RCE Surfaces That Control the DroidsQidan He, Juntao Wu · Black Hat Asia 2022
• 42mD1T2 - Rooting Android 8 with a Kernel Space Mirroring AttackYang Song, Yong Wang · Hack In The Box Amsterdam 2018
• 42mHack, Patch, Repeat: Insider Tales from Android’s...Maria Uretsky, Camillus Cai · BSidesSF 2025
• 36mPhysical Attacks Against SmartphonesChristopher Wade · Black Hat USA 2023