wtf is oppo-ghostlock?

This repository is a security research project that attempts to adapt a known Linux kernel vulnerability, called GhostLock (CVE-2026-43499), to work on a specific Android phone: the OPPO Find N2. The original exploit was designed for x86_64 computer processors, and the goal here is to translate it to run on ARM64, the processor type used in the phone. The project is written in C and uses Android's Native Development Kit to build the code. The README explains that the project has reached several milestones. The researchers verified a separate Firefox browser vulnerability, leaked certain kernel memory addresses using a technique called KernelSnitch, and successfully triggered the GhostLock bug itself. The code is built by running a Makefile with the NDK toolkit, then pushed to the phone using the Android Debug Bridge tool. The repository organizes its work into folders for the core exploit code, documentation, test programs, and analysis scripts. However, the core goal of the project has not been achieved. The README contains a large log of 37 different methods the researchers tried, and most of them failed. The project is blocked by two main problems. First, they could not bypass a security feature called CFI, which would let them manipulate internal kernel structures. Second, they could not find a way to write data into the kernel's memory, which is required to gain elevated privileges. The root cause is not a flaw in their code, but the phone's strict security configuration. The OPPO kernel blocks all known paths the exploit relies on, such as restricting access to device files and blocking certain system calls. The project is marked as in progress. Several stages passed their tests, but the central blocker around kernel memory access and CFI remains unsolved. The researchers conclude that the OPPO 5.10.236 kernel's security hardening prevents all known GhostLock exploitation paths.