A new rooting software for Samsung devices has been released. The application, named Root My Galaxy, allows rooting the phone without triggering Knox or unlocking the bootloader.
Samsung has effectively disabled bootloader unlocking in many key countries with One UI 8. However, a developer has released a new open-source tool called "Root My Galaxy" that promises a simple, one-click rooting process without wiping data, unlocking the bootloader, or disabling Knox.
Root My Galaxy released on GitHub
The Root My Galaxy application, hosted on GitHub, works like a KernelSU installer. Since the bootloader remains locked and Knox's e-fuse mechanism is not disabled, features like Secure Folder, Samsung Wallet, and banking applications continue to function normally. Play Integrity also works, but some security-focused applications installed by the user may detect root-related applications.
Leveraging the GhostLock vulnerability
The Root My Galaxy tool operates by exploiting CVE-2026-43499 (dubbed GhostLock), a recently discovered high-severity flaw in how the Linux kernel manages system memory locks. However, root privileges are provided temporarily; they need to be re-applied after each phone restart. This is great for not triggering Knox at the hardware level but introduces some repetitive tasks to keep root active.
Samsung has not yet patched the vulnerability
The developer states that the tool works on June 2026 security patches and older versions, but according to user reports, it also works on devices with the July 2026 security update applied. Of course, Samsung is likely to patch the vulnerability with the August 2026 security patch.
Snapdragon-powered devices are supported
Since kernel memory addresses vary across hardware and versions, the vulnerability relies on specific memory offsets maintained in the Root My Galaxy Payloads repository. Currently, supported devices are mostly Snapdragon-powered Samsung flagship models. The root tool works on the Galaxy S25 Ultra and is also being tested on the following models:
- Galaxy S25
- Galaxy S25 Plus
- Galaxy S25 Edge
- Galaxy S24
- Galaxy S24 Plus
- Galaxy S24 Ultra
- Galaxy S24 FE
- Galaxy Z Fold 7
The Galaxy Z Flip 7 is not on the list because it uses an Exynos processor. Additionally, Exynos-powered versions of the aforementioned devices are not supported. The reason the Galaxy S26 series is not included is that it comes with a newer kernel version that does not contain this vulnerability.
Your Samsung phone needs to be running the June 2026 security patch or an earlier version, preferably stable One UI 8.5 software. The latest version of the application can be downloaded from the official GitHub repository.
0 Comments: