Sony has paid security researcher Jordy (handle 2tonejordy) $50,000 through its HackerOne bug bounty program for reporting a PS5 hypervisor vulnerability. The payout, confirmed on October 14, appears to involve the same exploit that PS5 Linux developer Andy Nguyen (theflow0) discovered earlier but withheld. Nguyen announced in mid-September he was abandoning PS5 Linux development — including planned PS5 Pro support for 2027 — after alleging researchers agreed to delay disclosure until GTA 6 launched, then reported the bug within a day.
Jordy disputes this, stating he held off until another party found the same flaw using AI hours later, prompting his report. He denies receiving the bug from anyone. The jailbreaking community has criticized Jordy, with accusations he did not discover the vulnerability himself.
Sony's firmware 14.20, released October 21, lists only usability changes; it is unclear if the hypervisor bug was patched. A private exploit for firmware 14.10 has surfaced, but the hypervisor remains intact there. Users wishing to run Linux are advised to stay on older firmware.
Source: TechPowerUp News · Summarized by HeadlinesBriefing