6.12.38内核无法修补

[Alanhays]

patch_kernel_root(2026-3-20).exe 无法修补 kernel

内核文件: kernel.zip
版本: 3月20日Lite
内核版本: 6.12.38

提示

[abcz316]

This is a very good sample without kallsyms. I will fix this kernel type later. The Lite version can work without kallsyms. But I've been really busy recently. I'll leave you a message when I fix it

[Alanhays]

以下是我提取的一些数据希望对您有帮助。

计算偏移值（使用漏洞提权的root，内核没修改过）

(base) cool@cooldeMacBook-Pro OnePlusAce6T % adb shell
OP6117L1:/ # cat /proc/kallsyms | grep " _text"
0000000000000000 T _text
OP6117L1:/ # cat /proc/sys/kernel/kptr_restrict
2
OP6117L1:/ # echo 0 > /proc/sys/kernel/kptr_restrict
OP6117L1:/ # cat /proc/kallsyms | grep " _text"
ffffffd6fde00000 T _text
OP6117L1:/ # cat /proc/kallsyms | grep do_execveat_common
ffffffd6fe24e608 t do_execveat_common
ffffffd7003a462f d do_execveat_common.__already_done
ffffffd6fc2927f8 d do_execveat_common_kretprobe [oplus_secure_guard_new]
ffffffd6fc28f9c8 t do_execveat_common_entry_handler     [oplus_secure_guard_new]
ffffffd6fc2942f0 d do_execveat_common_entry_handler._alloc_tag  [oplus_secure_guard_new]
ffffffd7001e1ee0 a do_execveat_common_entry_handler._alloc_tag_cntr     [oplus_secure_guard_new]
2|OP6117L1:/ # echo "obase=16; ibase=16; FFFFFFD6FE24E608 - FFFFFFD6FDE00000" | bc
44E608

提取的 kallsyms.txt.zip

(base) cool@cooldeMacBook-Pro KernelGodMode % binwalk -e kernel

                                                                     /Users/cool/IdeaProjects/OnePlusAce6T/KernelGodMode/extractions/kernel
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
DECIMAL                            HEXADECIMAL                        DESCRIPTION
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
0                                  0x0                                Linux kernel ARM64 boot image, little endian, effective image size: 40763392 bytes
829376                             0xCA7C0                            SHA256 hash constants, little endian
18718720                           0x11DA000                          ELF binary, 64-bit shared object, ARM 64-bit for System-V (Unix), little endian
18726912                           0x11DC000                          ELF binary, 32-bit shared object, ARM for System-V (Unix), little endian
18818112                           0x11F2440                          SHA256 hash constants, little endian
18843704                           0x11F8838                          gzip compressed data, operating system: Unix, timestamp: 1970-01-01 00:00:00, total size: 47422 bytes
19956288                           0x1308240                          SHA256 hash constants, little endian
19957632                           0x1308780                          CRC32 polynomial table, little endian
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[+] Extraction of gzip data at offset 0x11F8838 completed successfully
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Analyzed 1 file for 85 file signatures (187 magic patterns) in 116.0 milliseconds

Kernel Configuration ：decompressed.bin.zip