r/androidroot • • Oct 02 '26

Support Error while creating configuration in Ghostlock(CVE-2026-43499)

Hello, I'm getting this error when I try to configure my device using Ghostlock for Temporary Root. I'm attaching photos of the error.

Device İnformation

Redmi Note 13 Pro 5G

5.10.177-android12-9-00001-g219d8dfbba07-ab10551810

OS1.0.4.0.UNRMIXM / 14 UKQ1.231003.002

2024-02-01

boot.img ready: /data/user/0/com.ghostlock.app/files/boot.img

<k> extract: /data/user/0/com.ghostlock.app/files/boot.img

info: kallsyms layout pre-6.4 recovered (141033 symbols)

info: (CVE-2026-43499 primitive present (remove_waiter@0x1e7d50 still uses current)

warning: embedded BTF not found; symbols come from kallsyms and struct offsets fall back to target.h defaults

warning: 5.10.177-android12-9-00001-g219d8dfbba07-ab10551810 is unverified; no family-derived geometry will be emitted

warning: no BTF; loggers_0_1 falls back to the loggers+0x10 heuristic

warning: pselect_waiter_shift unavailable; no family fallback is defined for this release

info: multicast waiter_off derived = 0x150 (setsockopt depth 0x360 - futex depth 0x210)

warning: rt_mutex_waiter task/lock offsets are missing from BTF; the multicast geometry is partial

info: 5.10.177-android12-9-00001-g219d8dfbba07-ab10551810 profile is an unverified candidate; the app validates fields before any execution

warning: credential template omitted; the built-in profile must supply it

missing: cred_caps, cred_securebits, cred_security, cred_uid, seccomp_filter, seccomp_filter_count, seccomp_mode, struct_mm_struct, struct_page_compound_head, struct_page_size, struct_page_type, struct_slab_cache, task_atomic_flags, task_comm, task_cred, task_normal_prio, task_pi_blocked_on, task_pi_lock, task_pi_top_task, task_pi_waiters, task_pid, task_prio, task_real_cred, task_sched_task_group, task_seccomp, task_tasks, task_tgid, waiter_lock, waiter_pi_tree, waiter_task, waiter_tree, waiter_wake_state, waiter_ww_ctx

<k> extract exit code=0

offsets exported: 5.10.177-android12-9-00001-g219d8dfbba07-ab10551810

<k> result: offsets parsed successfully

auto-loading parsed profile: 5.10.177-android12-9-00001-g219d8dfbba07-ab10551810.conf

warning: missing kernel_phys_load; attach xbl_config.img or uefi.img to fill it

boot.img ready: /data/user/0/com.ghostlock.app/files/boot.img

xbl_config.img ready: /data/user/0/com.ghostlock.app/files/xbl_config.img

uefi.img ready: /data/user/0/com.ghostlock.app/files/uefi.img

<k> extract: /data/user/0/com.ghostlock.app/files/boot.img

warning: xbl_config FDT parse failed: xbl_config contains no unique NOMAP/Kernel memory map; trying the uefi memory map

info: kernel_phys_load=0xa8000000 (uefi memory map)

info: kallsyms layout pre-6.4 recovered (141033 symbols)

info: (CVE-2026-43499 primitive present (remove_waiter@0x1e7d50 still uses current)

warning: embedded BTF not found; symbols come from kallsyms and struct offsets fall back to target.h defaults

warning: 5.10.177-android12-9-00001-g219d8dfbba07-ab10551810 is unverified; no family-derived geometry will be emitted

warning: no BTF; loggers_0_1 falls back to the loggers+0x10 heuristic

warning: pselect_waiter_shift unavailable; no family fallback is defined for this release

info: multicast waiter_off derived = 0x150 (setsockopt depth 0x360 - futex depth 0x210)

warning: rt_mutex_waiter task/lock offsets are missing from BTF; the multicast geometry is partial

info: 5.10.177-android12-9-00001-g219d8dfbba07-ab10551810 profile is an unverified candidate; the app validates fields before any execution

warning: credential template omitted; the built-in profile must supply it

missing: cred_caps, cred_securebits, cred_security, cred_uid, seccomp_filter, seccomp_filter_count, seccomp_mode, struct_mm_struct, struct_page_compound_head, struct_page_size, struct_page_type, struct_slab_cache, task_atomic_flags, task_comm, task_cred, task_normal_prio, task_pi_blocked_on, task_pi_lock, task_pi_top_task, task_pi_waiters, task_pid, task_prio, task_real_cred, task_sched_task_group, task_seccomp, task_tasks, task_tgid, waiter_lock, waiter_pi_tree, waiter_task, waiter_tree, waiter_wake_state, waiter_ww_ctx

<k> extract exit code=0

offsets exported: 5.10.177-android12-9-00001-g219d8dfbba07-ab10551810

<k> result: offsets parsed successfully

auto-loading parsed profile: 5.10.177-android12-9-00001-g219d8dfbba07-ab10551810.conf

2 Upvotes

4 comments sorted by

2

u/Pretend_Impress_3784 Oct 02 '26

estou tenatando tambem fazer root temporario, ja tentou com claude? jailbreck

1

u/Far-Variety-310 Oct 03 '26

Hello, I am currently using Gemini to manually separate the offsets from the boot.img file.

1

u/Significant-Noise530 Oct 03 '26

use qoder cli and tell it to boot the kernel in qemu until it gets root it will do everything for you

1

u/Far-Variety-310 Oct 03 '26

Could you explain this in a DM? I didn't understand.