v3.0.0

Highlights:

1. Breaking Change: After upgrading to 3.0, you need to reinstall all modules, refer: metamodule
2. Official Module Repository: https://modules.kernelsu.org/

---

1. 重大变更：升级到 3.0 后需要重新安装所有模块，参考：元模块
2. 官方模块仓库：https://modules.kernelsu.org/

What's Changed

• feat(ksud): Optimize ensure_dir_exist and do not hardcode path by @Tools-cx-app in #2932
• kernel: Prune allowlist only after boot completed by @aviraxp in #2922
• manager: display the same UID as a group by @YuKongA in #2933
• manager: fix webui package manager by @YuKongA in #2934
• kernel: no need to remark process on post-fs-data and boot-completed by @5ec1cff in #2935
• kernel: file_wrapper: copy mode of original inode by @5ec1cff in #2937
• kernel: Replace kmalloc() usages with kzalloc() by @aviraxp in #2939
• support metamodule, remove built-in overlayfs mount by @Ylarod in #2929
• ksud: add modules_update back by @5ec1cff in #2948
• kernel/ksud: Fix KSU_IOCTL_NUKE_EXT4_SYSFS definition by @aviraxp in #2949
• kernel: expose umount list to ioctl interface by @backslashxx in #2950
• manager: add inset support to webui by @KOWX712 in #2952
• Add undo uninstall module feature 添加撤销卸载模块功能 by @u9521 in #2920
• Translations update from Hosted Weblate by @weblate in #2917
• Add meta-overlayfs to Dependabot by @CanerKaraca23 in #2956
• add module config, migrate managedFeatures by @Ylarod in #2965
• ksud: Use regex to validate module id by @aviraxp in #2968
• chore(ksud): enable clippy::all, clippy::pedantic && make clippy happy by @Tools-cx-app in #2970
• manager: add support for opening and flashing zip files directly by @sakana164 in #2967
• build(deps): bump androidx.activity:activity-compose from 1.11.0 to 1.12.0 in /manager in the maven group across 1 directory by @dependabot[bot] in #2964
• ksud: Set KSU_MODULE only for module script by @aviraxp in #2971
• kernel: Unmount all isolated process which forks from zygote by @aviraxp in #2972
• Remove meta-overlayfs from Dependabot by @CanerKaraca23 in #2974
• ksud: refine boot patch, add --out-name arg to boot-patch and boot-restore command by @5ec1cff in #2982
• kernel: Remove unreachable vfs_statx handling by @aviraxp in #2987
• manager: Add confirmation dialog for ZIP module installation via external sources by @sakana164 in #2989
• manager: provide monet color to webui by @KOWX712 in #2981
• Translations update from Hosted Weblate by @weblate in #2963
• add hasFragileUserData to keep manager data when uninstall by @u9521 in #3005

New Contributors

• @Tools-cx-app made their first contribution in #2932

Full Changelog: v2.1.2...v3.0.0

v2.1.2

Highlights

New sucompat implementation, fixed a large number of related side-channel attacks

What's Changed

• Translations update from Hosted Weblate by @weblate in #2636
• Fix legacy prctl check condition by @aviraxp in #2864
• kernel: supercall: allow escalation on ioctl interface by @backslashxx in #2862
• Support building for kernel 6.14+ by @hmtheboy154 in #2662
• support mainline kernel by @aaaaaaaa-815 in #2869
• kernel: use sys_enter tracepoint for sucompat by @Ylarod in #2866
• Update Kernel Patches by @CanerKaraca23 in #2868
• fix: mark tif by @Ylarod in #2871
• fix sepolicy patch hint by @Ylarod in #2872
• feature: add enhanced security by @Ylarod in #2873
• manager: some ui changes by @YuKongA in #2870
• fix: sucompat by @Ylarod in #2874
• Translations update from Hosted Weblate by @weblate in #2875
• Revert "kernel: remove unused workqueue" by @aviraxp in #2877
• Translations update from Hosted Weblate by @weblate in #2876
• Replace mutex with spinlock for tracepoint registration by @aviraxp in #2882
• Switch kretprobe to heap by @aviraxp in #2880
• kernel: Refactor selinux/selinux.c by @shadichy in #2881
• Clean up kernel code by @aviraxp in #2898
• manager: install: add choose partition support by @YuKongA in #2896
• manager: if manager incompatible with current kernel, don't save ksud by @AlexLiuDev233 in #2895
• website: fix Japanese translation of installation guide by @kitadai31 in #2897
• manager: simplify find boot image by @tiann in #2901
• manager: Fix export log toast crash by showing Toast on main thread by @suqi8 in #2904
• kernel: Use task work to install fd by @aviraxp in #2905
• Translations update from Hosted Weblate by @weblate in #2879
• manager: 修复模板状态显示问题 by @u9521 in #2910
• kernel: Fix task flag marking for root and shell UID by @aviraxp in #2913
• kernel: fix zygote mark on first boot by @tiann in #2924
• kernel: refine syscall_hook_manager by @5ec1cff in #2925
• manager: introduce webui package manager api by @KOWX712 in #2928
• js: provide package manager function and documentation by @KOWX712 in #2930
• ci: fix android16-6.12 gki build by @tiann in #2931

New Contributors

• @shadichy made their first contribution in #2881
• @kitadai31 made their first contribution in #2897
• @suqi8 made their first contribution in #2904
• @u9521 made their first contribution in #2910
• @KOWX712 made their first contribution in #2928

Full Changelog: v2.0.0...v2.1.2

v2.0.0

Highlights

1. New supercall implementation: remove the tricky LSM hook with seccomp and ioctl, avoiding numerous side-channel attacks.
2. Support for kernel 6.12 and above.
3. Brand new theme.

What's Changed

• ci: Update lkm kernel version by @dabao1955 in #2567
• manager: hide root related features if kernelsu not available by @rsuntk in #2555
• kernel/throne_tracker: we just uninstalled the manager, stop looking for it by @backslashxx in #2584
• Translations update from Hosted Weblate by @weblate in #2558
• build(deps): bump the npm group across 1 directory with 24 updates by @dependabot[bot] in #2586
• build(deps): bump the crates group across 1 directory with 53 updates by @dependabot[bot] in #2585
• build(deps): bump the maven group across 1 directory with 12 updates by @dependabot[bot] in #2579
• ksud/installer: /odm handling by @backslashxx in #2513
• ci: update kmi versions by @ukriu in #2591
• Update zip-extensions and set needed features for zip by @aviraxp in #2592
• Fix fallback option for createRootShell() by @aviraxp in #2593
• Add a formatting string for the update list #2556 by @ShirkNeko in #2597
• build(deps): bump the maven group across 1 directory with 4 updates by @dependabot[bot] in #2612
• throne_tracker: avoid cross fs access by @aviraxp in #2626
• Switch to prepare_creds/commit_creds by @aviraxp in #2631
• kernel: throne_tracker: avoid cross-fs traversal using s_magic check by @backslashxx in #2633
• Translations update from Hosted Weblate by @weblate in #2587
• build(deps): bump the maven group across 1 directory with 7 updates by @dependabot[bot] in #2629
• kernel: core_hook: fix refcount leaks on try_umount by @rsuntk in #2635
• manger: fix lkm detection by @HSSkyBoy in #2654
• kernel: selinux: rules: Fix illegal RCU lock usage in apply_kernelsu_rules() by @Tashar02 in #2646
• kernel: added new prctl CMD_GET_MANAGER_UID to get the uid of the crowned manager by @rifsxd in #2673
• feat(ui): improve predictive back animations by @wxxsfxyzm in #2675
• ksud: make clippy happy by @5ec1cff in #2683
• ksud: support vendor_boot patching for some odd devices by @ukriu in #2650
• Update resetprop from Magisk v30.2 by @aviraxp in #2700
• kernel: selinux: rules: Micro-optimize get_policydb() and fix illegal RCU lock usage in handle_sepolicy() by @Tashar02 in #2695
• Reset seccomp filter count when escaping to root by @aviraxp in #2708
• Handle unmount for isolated process correctly by @aviraxp in #2696
• Revert "Handle unmount for isolated process correctly" by @Ylarod in #2718
• manager: switch ui to miuix design style by @YuKongA in #2710
• manager: fix button issues in module cards by @YuKongA in #2719
• manager: Fix some issues by @YuKongA in #2725
• manager: Add uninstall 2nd confirm by @YuKongA in #2729
• manager: Support search module by @YuKongA in #2730
• Strip JNI debug logs on release build by @aviraxp in #2732
• Add files via upload by @aviraxp in #2733
• fix 'for' loop problem by @aaaaaaaa-815 in #2745
• Unmount isolated process which forks from zygote unconditionally by @aviraxp in #2747
• Tweak shizuku template description by @aviraxp in #2746
• Revert "Unmount isolated process which forks from zygote unconditionally" by @yujincheng08 in #2776
• manager: Refactor module and superuser UI by @YuKongA in #2783
• manager: Allow module update info to scroll naturally by @YuKongA in #2784
• Don't write newline character to cgroup node by @aviraxp in #2804
• remove ksu tmp by @Ylarod in #2815
• Fix kernel panics caused by thread info flag corruption by @kerneltoast in #2818
• ci: use ddk for faster ci, manual gki image build by @Ylarod in #2817
• Fix incorrect function names in non-GKI integration documentation by @Copilot in #2722
• kernel: fix out-of-tree building by @Ylarod in #2819
• ci: move workflows to top-level and fix workflow references by @sakana164 in #2828
• initial fastlane structures from IzzyOnDroid by @IzzySoft in #2715
• templates: update translation by @igormiguell in #2761
• Add another translation in id_ID by @CEKIKOFGAMERS in #2797
• ci: Fix LKM version number anomaly and Git ownership issues by @Prslc in #2832
• manager: add kernel_umount switch by @YuKongA in #2848
• update ioctl macro by @Ylarod in #2850
• ci: build dev manager by @Ylarod in #2851
• Reapply: "kernel: Allow to use in Private Space" by @backslashxx in #2857

New Contributors

• @ShirkNeko made their first contribution in #2597
• @HSSkyBoy made their first contribution in #2654
• @Tashar02 made their first contribution in #2646
• @wxxsfxyzm made their first contribution in #2675
• @aaaaaaaa-815 made their first contribution in #2745
• @kerneltoast made their first contribution in #2818
• @Copilot made their first contribution in #2722
• @sakana164 made their first contribution in #2828
• @IzzySoft made their first contribution in #2715
• @CEKIKOFGAMERS made their first contribution in #2797
• @Prslc made their first contribution in #2832

Full Changelog: v1.0.5...v2.0.0

v1.0.5

ci: Update llvm version for chrome arcvm kernel build (#2551)

ref:
https://github.com/tiann/KernelSU/actions/runs/14575050545/job/40879303805#step:2:416

v1.0.3

• [Manager]: UI improvements
• [Module]: Fix potential corruption of module files during updates or installations.
• [Kernel]: Resolve occasional reboots when using su.
• [SU]: Correct the global mount namespace issue.

v1.0.2

• [Kernel] Support for kernel version 6.6
• [Module] Support for action.sh
• [Manager] Various UI improvements

WARNING: Non-GKI devices should not upgrade to this version!

v1.0.1

What's Changed

• manager: fix translation errors in zh_CN by @WenHao2130 in #1790
• 从非官方支持设备中移除K-Nel-M1721 by @KNKJ55 in #1792
• non-GKI:Remove maintainer Coconutat's repositories by @Coconutat in #1794
• Convert devpts domain to ksu_file by @aviraxp in #1801
• manager: fix update no response when changelog is empty by @TinyHai in #1786
• build(deps-dev): bump vitepress from 1.2.2 to 1.2.3 in /website by @dependabot in #1803
• build(deps): bump zip from 2.1.0 to 2.1.2 in /userspace/ksud by @dependabot in #1799
• build(deps): bump zip-extensions from 0.6.2 to 0.7.0 in /userspace/ksud by @dependabot in #1798
• website: update translations by @igormiguell in #1796
• build(deps): bump lifecycle from 2.8.0 to 2.8.1 in /manager by @dependabot in #1782
• build(deps): bump agp from 8.4.1 to 8.5.0 in /manager by @dependabot in #1824
• build(deps): bump androidx.compose:compose-bom from 2024.05.00 to 2024.06.00 in /manager by @dependabot in #1820
• build(deps): bump clap from 4.5.4 to 4.5.7 in /userspace/ksud by @dependabot in #1817
• build(deps): bump regex from 1.10.4 to 1.10.5 in /userspace/ksud by @dependabot in #1815
• build(deps): bump zip from 2.1.2 to 2.1.3 in /userspace/ksud by @dependabot in #1810
• website: fix typo by @dabao1955 in #1807
• Redirect the Feature Requests issue template tab by @dabao1955 in #1788
• manager: improve grammar in english by @igormiguell in #1814
• build(deps): bump com.google.devtools.ksp from 2.0.0-1.0.21 to 2.0.0-1.0.22 in /manager by @dependabot in #1811
• Translations update from Hosted Weblate by @weblate in #1734
• throne_tracker: skip iterate if failed to open dir by @5ec1cff in #1832
• Update resetprop by @aviraxp in #1842
• build(deps): bump log from 0.4.21 to 0.4.22 in /userspace/ksud by @dependabot in #1843
• build(deps): bump android_logger from 0.13.3 to 0.14.1 in /userspace/ksud by @dependabot in #1830
• website: fix typo by @igormiguell in #1834
• build(deps): bump clap from 4.5.7 to 4.5.8 in /userspace/ksud by @dependabot in #1850
• build(deps): bump lifecycle from 2.8.1 to 2.8.3 in /manager by @dependabot in #1851
• ksud: [Fix] grant root to the shell in debug mode by @RobinChenJP in #1853
• ksud: upgrade zip by @yujincheng08 in #1859
• Revert "ksud: [Fix] grant root to the shell in debug mode" by @yujincheng08 in #1860
• build(deps-dev): bump vitepress from 1.2.3 to 1.3.0 in /website by @dependabot in #1865
• Upgrade gradle by @yujincheng08 in #1866
• Setup Android SDK by @yujincheng08 in #1867
• build(deps): bump clap from 4.5.8 to 4.5.9 in /userspace/ksud by @dependabot in #1868
• build(deps): bump rust-embed from 8.4.0 to 8.5.0 in /userspace/ksud by @dependabot in #1869
• Allow skipping commented policy by @aviraxp in #1870
• build(deps): bump agp from 8.5.0 to 8.5.1 in /manager by @dependabot in #1873
• build(deps): bump com.google.devtools.ksp from 2.0.0-1.0.22 to 2.0.0-1.0.23 in /manager by @dependabot in #1872
• build(deps-dev): bump vitepress from 1.3.0 to 1.3.1 in /website by @dependabot in #1879
• Upgrade deps by @yujincheng08 in #1886
• build(deps): bump org.lsposed.libcxx:libcxx from 27.0.11718014-beta1 to 27.0.12077973 in /manager by @dependabot in #1885
• build(deps): bump io.coil-kt:coil-compose from 2.6.0 to 2.7.0 in /manager by @dependabot in #1888
• Upgrade zip by @yujincheng08 in #1891
• Group dependabot dependencies by @yujincheng08 in #1892
• build(deps): bump the crates group in /userspace/ksud with 40 updates by @dependabot in #1894
• build(deps): bump the npm group in /website with 13 updates by @dependabot in #1893
• build(deps): bump the crates group in /userspace/ksud with 3 updates by @dependabot in #1898
• build(deps): bump the npm group in /website with 2 updates by @dependabot in #1899
• Upgrade rustix by @yujincheng08 in #1900
• build(deps): bump syn from 2.0.71 to 2.0.72 in /userspace/ksud in the crates group by @dependabot in #1902
• build(deps): bump the npm group in /website with 3 updates by @dependabot in #1903
• build(deps): bump the npm group in /website with 3 updates by @dependabot in #1905
• build(deps): bump the crates group in /userspace/ksud with 7 updates by @dependabot in #1908
• build(deps): bump the npm group in /website with 6 updates by @dependabot in #1907

New Contributors

• @WenHao2130 made their first contribution in #1790
• @RobinChenJP made their first contribution in #1853

Full Changelog: v1.0.0...v1.0.1

v1.0.0

KernelSU has been born for two years. Today we officially welcome version 1.0!

Due to the fact that we haven't added features to non-GKI devices for a long time, and maintaining them requires a significant amount of time, we have removed support for non-GKI devices. Non-GKI devices can only stay on version 0.9.5 (the manager can update). In the future, we will focus on adding new features for GKI devices.

Our energy is limited, but the rewards are even more limited, so please understand our choice, thank you!

v0.9.5

• [Kernel] Fix random reboot caused by potential deadlock
• [Kernel] Support private space for Android 15
• [Manager] Fix file residue after complete uninstallation
• [Manager] Support saving logs locally

v0.9.4

• [Manager]: Fix selecting KMI not working.
• [Kernel]: hook stable symbols to improbe compatibility.
• [Module]: Update resetprop.
• [Manager]: Some UI improvements.
• [Kernel]: Fix some detection issues.