GoKawiilZac Kew-Denniss / Android Authority
TL;DR A new open-source tool called “Root My Galaxy” uses a software exploit to grant temporary root access on select Samsung Galaxy flagships.
The tool works without wiping data, unlocking the bootloader, or tripping Knox, preserving features like Secure Folder, Samsung Wallet, and Play Integrity.
Root access is temporary and must be reapplied on every reboot, and devices running newer security patches or Exynos chipsets are currently excluded.
Modding modern flagship phones has become an increasingly uphill battle. Samsung hasn’t been a stalwart in this space for a while, thanks to Knox, but the company went further and effectively killed bootloader unlocking on One UI 8 in several major regions. However, a developer has now released a new open-source tool called “Root My Galaxy” that promises a simple, one-click rooting procedure without wiping data, unlocking the bootloader (!) or tripping Knox (!!).
Detailed by developer busung on XDA Forums and hosted on GitHub, the Root My Galaxy app functions as a KernelSU installer. Because it leaves the bootloader locked and doesn’t blow the Knox e-fuse, features like Secure Folder, Samsung Wallet, and banking apps continue to work normally. Even Play Integrity remains intact, though some security-focused apps might detect the root-related apps that you may subsequently install.
The Root My Galaxy app/tool works by exploiting CVE-2026-43499 (dubbed “GhostLock”), a recently discovered high-severity bug in how the Linux kernel manages system memory locks. When a lock operation fails and rolls back, the system cleans up after the wrong process. This leaves behind a “ghost” pointer referencing memory that has already been freed, usually referred to as a “Use-After-Free” flaw. The exploit hijacking this leftover memory space allows the Root My Galaxy tool to take control of kernel memory and directly inject KernelSU privileges.
This is a software-level kernel exploit and acts as a “soft” root, meaning root privileges are temporary and must be reapplied manually after every phone reboot. That’s great for not tripping Knox at the hardware level, but it does introduce some repetitive labor to keep root active (but the few steps are a small price to pay)
Developer busung mentions the tool runs on June 2026 security patches and older, but community members like thatjoshguy69 on X have had luck with the exploit running on July 2026 patches, too. There’s a very high chance that Samsung will patch the exploit with the August 2026 security patches, so advanced users should make hay while the sun shines. With root access, you can explore system-level adblockers, remove pre-installed bloatware, try out advanced automation tools like Tasker, and go even deeper into customization with ZygiskNext and LSPosed.
What devices does Root My Galaxy support? Because kernel memory addresses vary across hardware and builds, the exploit relies on specific memory offsets maintained in the Root My Galaxy Payloads repository.
... continue reading