Hacker Gets $50,000 Sony Bounty for PS5 Hypervisor Bug That Enabled Linux

A hacker used an AI large language model to find a hypervisor bug that allowed security researchers to load Linux on PlayStation 5 consoles, reported the flaw to Sony, and received a $50,000 bug bounty. The award, shared on X by the person who goes by Jordy, drew criticism from members of the PS5 jailbreaking community. The report also led to a firmware update that patched the flaw before the launch of GTA VI.

Bounty draws backlash

IGN reports that Jordy shared the award on X with the message, "I can at least buy GTA 6 with this, I think," on Oct. 14, 2026. One user named Gille replied, "50k in bank but 0 friends left. Worth it?" Another user named Darth Riker said Jordy did not find the bug themselves and compared them to scammers. Matthew Cramer said the worst part was not the money but that exploiting PS5 is about freedom, ownership, and control. The biggest driver of criticism was that Jordy had agreed to delay the report until after GTA VI launched, but moved forward after someone else discovered the flaw, meaning it would be patched before the game's launch and possibly deny someone else a payday. Jordy told IGN they agreed with Andy Nguyen, known as flow0, to delay the report until after GTA VI came out, but later reported it because other researchers using generative AI had also found the bug and Jordy risked losing the bounty. Jordy said, "I decided I would report it," and "If I and another person can find it with LLM, so can someone else."

Firmware patch and Linux loader

The ps5-linux-loader GitHub project requires a PS5 Phat, Slim, or Pro running firmware version 3.00 to 13.60 to work as intended. It is unclear whether Sony had been aware of the flaw before Jordy's report. Sony released firmware version 14.20 on Oct. 21, 2026, which patched the flaw. Because the latest games often require the latest firmware, users experimenting with running Linux on a PlayStation 5 would have to choose between that and playing GTA VI on launch day.

AI use and scene response

Another source of criticism was Jordy's use of AI. While AI can be useful for discovering vulnerabilities when used by professionals, it has also overwhelmed several bug bounty programs with AI submissions. This includes Google, which froze its program until 2027, and Linus Torvalds, who switched to a public system as the Linux security mailing list became almost entirely unmanageable, with AI bug hunters finding as many as 2,000 CVEs per release. Nguyen posted on Sept. 15, 2026 that he was stepping away from the PS5 scene and stopping all work on PS5 Linux, including plans to finish PS5 Pro support and release it in 2027. He said the scene used to be a group of highly talented researchers but is now a bunch of noobs using LLMs and writing hacks they do not even understand. He also said slop kiddies found the only hypervisor bug left, which he had also found a while ago, and decided to report it to Sony. Sony's PlayStation 5 has recently been a focus of hacks, emulators, and jailbreaking, especially after the company announced it will end physical game disc production by January 2028. Despite pushback against that decision, Sony doubled down and even threatened to cut off customer support and take legal action against harassment from disgruntled customers. This, combined with Jordy's use of AI and the X post sharing the $50,000 award, drove ire among many in the PS5 jailbreaking scene.

Sources: Tom's Hardware