PS5 Linux Project Ends as Hacker Reports Exploit to Sony

A prominent PlayStation hacker has announced his departure from the modding community after a dispute over an exploit disclosure reached a breaking point. TheFlow, who had been working on a project to bring Linux to PlayStation 5 consoles, stated on social media that he was abandoning all PS5-related work following the release of a critical hypervisor exploit to Sony.

The Linux Port Dream

Earlier in 2026, TheFlow shared footage of a modified PS5 running Linux alongside Grand Theft Auto 5 with ray tracing enabled. The demonstration showcased what was technically possible: turning a PlayStation 5 into a Steam Machine-like device capable of running PC software. However, the initial version of the Linux port worked only on older PS5 models running previous firmware versions.

TheFlow had been developing an enhanced version of the project designed to support newer console variants, including the PS5 Pro, across the latest firmware updates. The hacker stated he planned to complete the work and release the Linux port in 2027, positioning it as a significant milestone for the console modding community.

Why Timing Mattered

The release strategy was deliberate. Grand Theft Auto 6 will launch as a digital-exclusive title, meaning players must purchase it through the PlayStation Network store. Accessing PSN requires running the most current firmware version available. Once Sony became aware of the exploit TheFlow was using, the company would likely patch it immediately through a mandatory update. By delaying the public release of his Linux port until after GTA 6’s launch, TheFlow sought to give players a window to purchase and enjoy the highly anticipated game while still being able to use the Linux mod later.

The Hypervisor Exploit and Its Value

Read also: The Fight for Authentic Video Game Merchandise in an AI Knockoff Era · Why Blizzard Announced Diablo 5 Nearly Three Years in Advance · Overwatch’s Sombra Becomes Support in Season 5, Ending Decade as Damage Hero · Comiket 2025 Rebounds to 300,000 as Gaming Cosplay Scene Flourishes

At the core of TheFlow’s Linux project was a hypervisor exploit—a vulnerability in the PS5’s deep security architecture responsible for anti-piracy and anti-tampering protections. Discovering such vulnerabilities requires extensive research and technical expertise. TheFlow had identified this exploit as the key to unlocking Linux compatibility across newer PS5 models and firmware versions.

A Promise and Its Violation

TheFlow shared knowledge of the hypervisor exploit with other members of the modding community under a specific condition: that the exploit would remain undisclosed until after GTA 6’s release. Jordy, another PS5 hacker who incorporates artificial intelligence tools into his work, was among those who received this information. Jordy publicly acknowledged being asked by TheFlow to refrain from reporting the exploit and initially agreed to do so.

The situation changed when a third person in the community independently discovered the same hypervisor vulnerability using AI tools. Faced with the knowledge that the exploit would likely be discovered and reported by others seeking the financial reward offered through bug bounty programs, Jordy made a different choice.

The HackerOne Disclosure

On September 15, Jordy submitted the hypervisor exploit to Sony via HackerOne, a platform where security researchers can report vulnerabilities to companies in exchange for bounties that sometimes amount to thousands of dollars. According to Jordy’s account, he had discovered the hypervisor vulnerability independently using his AI tools rather than obtaining it directly from TheFlow. He claimed to have initially honored the agreement but reported the exploit after learning that someone else in the community had found it.

Many in the PS5 modding community believed that Jordy’s decision was motivated by financial need—his mother is reportedly facing a terminal illness—and that the bounty compensation would have been significant in his choice. When members of the community sent him harsh messages about his mother, Jordy shared screenshots but did not elaborate further on his reasoning for the disclosure.

TheFlow’s Exit and Community Reaction

TheFlow’s response came swiftly. He posted on social media that he was stepping away from the entire PS5 hacking and modding scene, abandoning all work on the Linux project. In his statement, TheFlow expressed frustration about the current state of the community, claiming that what was once a group of highly skilled researchers had devolved into inexperienced modders using language models to create exploits they did not fully understand. He specifically criticized those who had found and reported the hypervisor bug, describing them as producing low-quality work.

While TheFlow did not explicitly name Jordy in his announcement, community members widely understood the statement as referring to him based on prior public exchanges between the two hackers about the exploit disclosure agreement.

A Community Divided

The disclosure triggered significant debate within the PS5 jailbreak community. Some members sympathized with Jordy’s financial desperation and acknowledged that he had apparently discovered the exploit independently using AI assistance. Others viewed his decision as a betrayal of an agreement that would have protected a valuable project benefiting many console owners. A third perspective emerged from those who noted that other researchers would likely have reported the exploit eventually anyway, and that the community might continue working on Linux ports even if doing so would take considerably longer to achieve the same results.

An alternative path that circulated in discussions involved a community-funded bounty—reportedly exceeding $37,000—that could have been offered for the hypervisor exploit. Such a bounty might have kept the vulnerability away from Sony’s hands while compensating the researchers. However, this approach carried its own complications, as accepting such compensation could have complicated either hacker’s future participation in official PlayStation bug bounty programs.

Sony’s Response and Firmware Update

Sony responded with action. On Wednesday following the HackerOne report, the company released a new PS5 firmware update. Community members, including Jordy himself, immediately warned console owners who wished to continue using jailbreak modifications to avoid installing the update. The firmware patch would almost certainly close the hypervisor vulnerability that TheFlow had spent months working to leverage for the Linux port project.

Uncertain Future for PS5 Linux

With TheFlow’s departure, the status of the Linux port remains unclear. While some community voices expressed hope that other researchers would continue the project, the loss of TheFlow’s knowledge and continued involvement represented a significant setback. The original 2027 release timeline appears untenable at this point, and the path forward for bringing Linux to newer PS5 models, particularly the PS5 Pro, is now uncertain.

The broader implications extend to the relationship between security researchers, bug bounty programs, and the modding community. The incident highlighted tensions between financial incentives offered by companies like Sony and the collaborative agreements within communities of enthusiasts working on long-term projects.