KernelSU

Verified safeOpen sourceExclusive
—
No reviews reviews
69
downloads
12
android

AI summary

Kernel-based root solution for Android with module system for systemless modifications. Features app profiles to restrict root access per-app, supports GKI 2.0 devices and manual builds for older kernels. Includes new boot stage script timeouts, kernel module blocking, and shell root restricted to adb sessions. Caution: recent kernels may cause panics on x86_64.

Generated by AI. May contain inaccuracies.

Screenshots

About this app

A kernel-based root solution for Android devices.

Features

1. Kernel-based su and root access management. 2. Module system based on metamodules: Pluggable infrastructure for systemless modifications. 3. App Profile: Lock up the root power in a cage.

Compatibility state

KernelSU officially supports Android GKI 2.0 devices (kernel 5.10+). Older kernels (4.14+) are also supported, but the kernel will need to be built manually.

With this, WSA, ChromeOS, and container-based Android are all supported.

Currently, the arm64-v8a and x86_64 architectures are supported.

⛔ Caution

Recent kernel versions have implemented a breaking change causing KernelSU to fail and potentially trigger a kernel panic on x86_64! Check the website for more info!

📄 License - Files under the kernel directory are GPL-2.0-only. - All other parts except the kernel directory are GPL-3.0-or-later.

Official address:https://kernelsu.org/

What's new

vv3.3.1Oct 12, 2026

docs: update version references to 3.3.0 by @5ec1cff in #3667 • refactor(kernel, ksud, manager): Switch webview zygote umount to allowlist by @aviraxp in #3666 • fix(actions): upload release artifacts correctly by @5ec1cff in #3671 • docs, manager: update Indonesian translations by @Neebe3289 in #3656 • fix(kernel): Preserve a ebitmap's size for each policy type by @aviraxp in #3680 • manager: update Chinese (Traditional Han script, Hong Kong) translations by @tpnonthealps in #3685 • feat(ksud): Implement SIGSYS handler by @aviraxp in #3677 • fix(kernel, uapi, ksud): make fd wrapper work with app profile by @Dr-TSNG in #3679 • build(deps): bump the npm group in /website with 14 updates by @dependabot[bot] in #3676 • build(deps): bump the crates group with 7 updates by @dependabot[bot] in #3675 • build(deps): bump actions/setup-java from 5 to 6 in the actions group by @dependabot[bot] in #3673 • feat: new version matching detection mechanism by @5ec1cff in #3516 • feat(resetprop): support update long value for ro props by @5ec1cff in #3696 • fix(kernel): Reject all signature block id except v2 by @aviraxp in #3700 • kernel: retain capabilities across execve for non-root profiles by @u9521 in #3710 • fix(manager): Use MediaStore to download modules by @aviraxp in #3707 • build(deps): bump the maven group in /manager with 5 updates by @dependabot[bot] in #3727 • manager: use LazyColumn in ColorPaletteScreenMaterial by @KOWX712 in #3730 • manager: Support customizing module description collapse line count by @HChenX in #3703 • build(deps): migrate dependencies to new repos by @5ec1cff in #3723 • fix(kernel): open file without touching fsnotify and atime while scanning manager apks by @5ec1cff in #3733 • [FIX] Miscellaneous build errors in syscall_hook_manager and arm64 patch_memory by @0ctobot in #3738 • kernel: util: wire up ksyscall by @backslashxx in #3742 • kernel: fix avtab iteration macro by @XiaoTong6666 in #3701 • fix(manager): Prevent exception if no root access by @aviraxp in #3741 • fix(ksud): wait for service death before post-fs-data when soft reboot by @5ec1cff in #3744 • kernel: fix RCU-protected SELinux policy access by @XiaoTong6666 in #3746 • fix(manager): Unexport magica receiver by @aviraxp in #3747 • kernel: Add Android riscv64 support with LKM by @yujincheng08 in #3750 • fix(ksud): use waitsys to wait when soft reboot by @5ec1cff in #3754 • refactor(ksud): update waitsys and refactor logic by @5ec1cff in #3755 • feat(ksud): add timeout for boot stage scripts by @5ec1cff in #3797 • Sepolicy by @aviraxp in #3799 • fix(kernel): Avoid repeatedly triggering service stage by @aviraxp in #3800 • ksud: Scan APK comments up to the ZIP length limit by @fhgffy in #3802 • ksud: Skip KMI detection for config-only patches by @fhgffy in #3803 • manager: don't offer kernel install in jailbreak mode by @chisewaguri in #3801 • build(deps): bump the npm group across 1 directory with 19 updates by @dependabot[bot] in #3867 • kernel: throne_tracker: avoid deadlocks on iterate_dir by @backslashxx in #3865 • refactor(kernel): pin manager package name by @5ec1cff in #3868 • fix(kernel): fix sidtab detection by @5ec1cff in #3873 • apk_sign: get_pkg_from_apk_dir_path: move to strrchr by @backslashxx in #3874 • fix(kernel): pkg_observer: defer track_throne to task_work by @yujincheng08 in #3871 • fix(kernel): fix time side-channel detection in selinux hide by @5ec1cff in #3877 • feat: support forcing feature values via ksu_config (incl. boot-patch-v2) by @Ylarod in #3878 • feat(manager): switch module repository to the KernelSU Modules API by @Ylarod in #3880 • feat: block kernel modules at boot via native module_blacklist by @Ylarod in #3881 • feat: add shell_su_adb_only feature to restrict shell root to adb sessions by @Ylarod in #3882 • fix(manager): require explicit opt-in to block kernel modules by @Ylarod in #3883 • build(deps): bump the crates group across 1 directory with 36 updates by @dependabot[bot] in #3870 • manager: Update Indonesian translations by @Neebe3289 in #3748

About this version

Version
v3.3.1 (32680)
Size
13.01 MB
Requires Android
12
Target SDK
31
Architecture
arm64-v8a, riscv64, x86_64
Downloads
69
Updated
Oct 12, 2026
Package
me.weishu.kernelsu
Languages42
ArabicAzerbaijaniBanglaBosnianBulgarianBurmeseChineseCroatian

Similar apps

Ratings & reviews

—
0 ratings
  • 5
    0
  • 4
    0
  • 3
    0
  • 2
    0
  • 1
    0

Write a review

Tap a star to rate this app