wtf is duchamp-root?

duchamp-root is a one click rooting tool for a specific phone, the Xiaomi K70e, known by its codename duchamp. It works by exploiting a kernel vulnerability the README labels CVE-2026-43499, nicknamed IonStack, and once it gains control it installs KernelSU, a root management system, as a background daemon on the device. The README explains the exploit chain in technical detail. It starts by leaking the kernel's memory layout through a timing side channel, then hijacks a table of file operation function pointers using a race condition, then forges a pipe buffer structure to get the ability to read and write arbitrary physical memory. From there it patches the process credentials of a root child process to give it full permissions, disables security mechanisms like seccomp and SELinux enforcement, and finally extracts and launches the embedded KernelSU daemon so the root access persists. To use it, you need a Xiaomi K70e device, a working ADB connection, and either an unlocked bootloader or acceptance that the tool's injection method does not strictly require one. The basic flow is downloading a file called preload.so from the project's releases, pushing it to the device over ADB, and running it against a target app using LD_PRELOAD, a Linux mechanism for injecting code into a running process. The project can also be compiled from source using the Android NDK's aarch64 compiler and a Makefile. The current release only fully supports the duchamp device, though the source includes reference configuration files for several other device codenames that the author says are unverified. The README is explicit and repeated in its disclaimer that this tool is for educational and research purposes only, and warns that unlocking a bootloader can void a warranty and that rooting a device can cause it to stop booting or lose data, with no responsibility accepted for damage. The code is released under the GPLv3 license, a copyleft license that requires derivative works to remain open source under the same terms. The README is written in a casual, meme heavy style with both Chinese and English sections describing the same technical content.