Question SM-G998U1 and Dirty Pipe - Samsung Galaxy S21 Ultra

I can already guess that the answer is probably "no", but is there any indication that the newly-discovered "dirty pipe" exploit is usable on any of the U1 firmwares out there? Is there maybe a way to unpack a firmware and to repack it with an insecure kernel version?

Related

Question on ODIN flash

Hi, I have the Singapore firmware on my device (non-rooted): XSP
This firmware is absolutely ridiculous when it comes to updates. I am currently Sept 1, 2018 security patch, and that is the latest available for this device.
Is it possible to flash another exynos firmware from ODIN to my device WITHOUT factory resetting my phone, so my data and apps don't get affected? Can I just download the UK version, for instance, from Sammobile and flash it without affecting my data?
hkalltheway said:
Hi, I have the Singapore firmware on my device (non-rooted): XSP
This firmware is absolutely ridiculous when it comes to updates. I am currently Sept 1, 2018 security patch, and that is the latest available for this device.
Is it possible to flash another exynos firmware from ODIN to my device WITHOUT factory resetting my phone, so my data and apps don't get affected? Can I just download the UK version, for instance, from Sammobile and flash it without affecting my data?
Click to expand...
Click to collapse
Yes thats no problem, just make sure you flash home CSC, if you flash CSC it will factory reset your devcie.
Thanks! I'm guessing it's not considered a dirty flash or anything right? If I install another firmware on top of XSP and flash csc_home, can it effect performance negatively?
What's the best recommended firmware to flash that gets the latest updates to replace my current XSP?
hkalltheway said:
Thanks! I'm guessing it's not considered a dirty flash or anything right? If I install another firmware on top of XSP and flash csc_home, can it effect performance negatively?
What's the best recommended firmware to flash that gets the latest updates to replace my current XSP?
Click to expand...
Click to collapse
anyone?
hkalltheway said:
Thanks! I'm guessing it's not considered a dirty flash or anything right? If I install another firmware on top of XSP and flash csc_home, can it effect performance negatively?
What's the best recommended firmware to flash that gets the latest updates to replace my current XSP?
Click to expand...
Click to collapse
You can flash ANY firmware where OXM is mentioned in the CSC
Flash AP BL CP HOME_CSC_OXM with Odin 3.13.1 to your device: your data & CSC (XSP) will stay intact.
You can't change CSC on your device; if you flash i.e. the latest UK-firmware (BTU/XEU) and that build is NOT released for CSC XSP, you won't get OTA's to your device and you'll have to flash later FW's again via Odin.
henklbr said:
You can flash ANY firmware where OXM is mentioned in the CSC
Flash AP BL CP HOME_CSC_OXM with Odin 3.13.1 to your device: your data & CSC (XSP) will stay intact.
You can't change CSC on your device; if you flash i.e. the latest UK-firmware (BTU/XEU) and that build is NOT released for CSC XSP, you won't get OTA's to your device and you'll have to flash later FW's again via Odin.
Click to expand...
Click to collapse
Does this mean you can use any CSC from other official firmware and the drawback is that you cannot get OTA?
denru01 said:
Does this mean you can use any CSC from other official firmware and the drawback is that you cannot get OTA?
Click to expand...
Click to collapse
If your CSC contains OXM (check with *#1234# in your dialer), you can flash every OXM-firmware released.
But: if that build is not released in your country, you won't get OTA-updates.
If your country will get a newer build, and you flash that to your device, than you'll receive OTA's again...

How To Guide G998U and G998U1 Firmware Links and Flashing Discussion Here

For those who aren't already aware, G998U is the model number of all of the US carrier versions of the S21 Ultra. The G998U1 is the model number of the same device, but sold by Samsung SIM unlocked and with no carrier bloatware. Firmware is 100% interchangeable among these models: any U or U1 firmware version can be flashed to any U or U1 device at any time, assuming that you're not trying to downgrade the bootloader. A "U to U" or "U1 to U1" flash does not require a factory reset, but changing from one firmware to the other will require one. Also, U firmware is identical for the 4 base files (AP, BL, CP, CSC) for each individual build, no matter which carrier it comes from. So if you download 2 different carrier versions of the exact same build, the 4 base files will be identical. Where the firmware differs is in the USERDATA file - that's where the carrier bloatware and customizations reside.
Manual Odin flashing is designed for those who:
- want to manually update to a newer version of U firmware on their U device, either because they don't want to wait for their carrier's OTA or because OTAs aren't working on their device, or a different carrier got a new feature/patch before they did
- want to flash U1 firmware to their U device
- want to convert from U1 firmware to carrier U firmware
- want to convert from one carrier's U firmware (with all apps and bloatware) to a different carrier's U firmware (with all apps and bloatware)
For those who aren't already aware, anyone can now download firmware for almost any Samsung device any time that they want, via the various firmware download tools posted here on XDA like SamFirm or Frija. There are threads and info about them here on XDA so I won't waste time explaining - do a search if you're not already familiar with these tools. But they only provide whatever the latest/newest/current version is - nothing older. I pay for a subscription to a site that gets the official releases (usually) before they hit the firmware download tools, so that's where my files come from.
This is not a "beginner's guide to Odin flashing" -type post/thread, so I won't list basic, step-by-step flashing instructions. My threads are geared towards those who already know what they're doing. If you're new to manually flashing Samsung firmware (or haven't done it in a long time), I recommend you consult one of those "beginner's" guides- there are tons of them here on XDA.
Happy flashing!
U firmware: https://www.androidfilehost.com/?w=files&flid=322089
U1 firmware: https://www.androidfilehost.com/?w=files&flid=322090
Notes:
- DON'T QUOTE THE OP WHEN YOU REPLY, kthx
- I have lots of threads just like this one for other Samsung flagships, if it interests you. For those who have already made use of my previous threads for a different device and are upgrading to an S21, welcome back
- My zips are compressed extra small for space and bandwidth savings. The default Windows extractor can't handle it, so you'll need a 3rd party tool like 7zip, WinRAR, etc
- it's quite time consuming to download the files, zip them up, and upload them to AFH. And, I do threads like this for every single Sx and Note x model, so I won't be uploading every single version. The only full builds that I upload are ones where I get access to a new bootloader and/or Android version early, before they hit the firmware download tools.
- My naming method for folders on AFH is: build - bootloader - Android version
So "SAT - 1 - 9.0" means the full build number ends in SAT, it's bootloader version 1, and it's Android 9.0. When bootloader and Android versions increment, the first build to have those changes will have its folder notated appropriately.
- HOME CSC file keeps data intact; using the other CSC will wipe data. Flashing USERDATA will also wipe data.
- Since AT&T doesn't allow their firmware to be publicly available (for any of their devices), I'll try to always upload at least one USERDATA per bootloader increment for AT&T (and Cricket, if they get this model). I'll also upload any full builds if AT&T is the only carrier to get that specific build, because you won't be able to find the files anywhere else.
- For identifying USERDATAS, and to know what region/CSC to use in the firmware download tools if you're downloading yourself:
AIO = Cricket (not available via firmware download tools)
ATT = AT&T (not available via firmware download tools)
BST = Boost Mobile
CCT = Xfinity Mobile (Comcast)
CHA = Spectrum Mobile (Charter)
DSH = Dish Network
SPR = Sprint
TMB = T-Mobile
TMK = Metro PCS
USC = US Cellular
VZW = Verizon (available via firmware download tools, but Manual Entry is required - Auto will not work)
XAA = U1 firmware
- the correct procedure for switching from one carrier's firmware to another carrier's firmware is:
1. Flash full U1 firmware package including non HOME CSC
2. Upon boot, insert a SIM of the carrier whose firmware you want
3. Watch for the popup that says "reboot to apply new carrier settings" etc, and do it
4. After that restart completes, reboot back to Download mode and flash the full U firmware package, with the USERDATA file of the carrier whose firmware you want
Flashing the U1 right away when my Devices arrives
Polishow said:
Flashing the U1 right away when my Devices arrives
Click to expand...
Click to collapse
That's why I post it
That, and so that anyone interested can dig through the firmware for anything interesting.
I'm uploading in order of model number, so Ultra is last unfortunately - and my upload speed is only 10 Mbps. Should be up in the next few hours though
Initial U firmware and AT&T USERDATA are posted, along with U1 firmware. U firmware is not yet accessible in the firmware download tools like SamFirm and Frija, but if anyone wants a different carrier's USERDATA (for flashing bloatware to a U1 device or for converting a U device from one carrier's bloatware to a different one), let me know and I'll get it for you
Are anyone know if Is the version SM-998U or SM-998U1 have or not dual SIM?
Thanks for doing this ! My phone arrives Wed and of course I wanna flash the U Home CSC to my unlocked U1 device so I can get the AT&T calling features. Are the ones you've uploaded the latest firmwares?
And thanks again for always taking time to do this!!!
Sorry for the possible silly question, but I am coming back to the Galaxy after 4 years on the Pixel and haven't been flashing for a while.
I am getting an Ultra from T-Mobile. If I flash the U1 (to remove the bloat) and then follow the instructions above, it says it will put the carrier files on there. Will that just put the bloat back on? I guess I was wondering if it would make it "stock" going forward. I just wanted to figure that out before I set the phone up since it requires a factory reset. Thanks!
crowax said:
Sorry for the possible silly question, but I am coming back to the Galaxy after 4 years on the Pixel and haven't been flashing for a while.
I am getting an Ultra from T-Mobile. If I flash the U1 (to remove the bloat) and then follow the instructions above, it says it will put the carrier files on there. Will that just put the bloat back on? I guess I was wondering if it would make it "stock" going forward. I just wanted to figure that out before I set the phone up since it requires a factory reset. Thanks!
Click to expand...
Click to collapse
No, that's not what it says - I think you're mis-reading. Flashing U1 removes bloat, period. If you want the bloat gone, you have no need to do anything else other than simply flashing U1 firmware
iBowToAndroid said:
No, that's not what it says - I think you're mis-reading. Flashing U1 removes bloat, period. If you want the bloat gone, you have no need to do anything else other than simply flashing U1 firmware
Click to expand...
Click to collapse
Oh perfect. I checked again after your post and my confusion was at
"the correct procedure for switching from one carrier's firmware to another is". I was thinking it was the procedure to switch from a carrier firmware to any other firmware including U1. So the re-adding of the carrier files didn't make sense.
Thank you very much for your quick answer!
OP Requested my linked deleted
bANONYMOUS said:
Here are links to both Canadian and US official samsung firmwares without bloat
Samsung Official Unlocked Firmware:
Canada = XAC
United States = XAA
Click to expand...
Click to collapse
Go create your own thread if you're going to post links other than the ones in my OP
I do have my own thread about these firmwares, I was just including the Canadian bloat free firmware because you only have the US firmwares. The links are to samfw because they update them regularly so people can get the latest releases where as your links are the current version you linked so if you don't update them then they'll be out of date versions. Do you get paid from your Android File Host links or something? What's the issue? No need to be hostile, just trying to help provide information
EDIT:
Also, when you're flashing between different carrier firmware's, you should only use CSC and not HOME_CSC because keeping the user data sometimes includes the bloat apps preinstalled.
The rule of thumb is if you're CHANGING anything, start fresh with CSC
If you're UPDATING from the same carrier firmware to a newer version, use HOME_CSC.
So for anyone using this guide, it's not recommended to use HOME_CSC when converting over to the bloat free firmware as it's a different carrier release. Not saying it won't work, it's just not recommended, almost like a dirty flash so it could cause stability issues down the road after a few OTA's or something.
bANONYMOUS said:
I do have my own thread about these firmwares, I was just including the Canadian bloat free firmware because you only have the US firmwares.
Click to expand...
Click to collapse
XAC is for model G998W. The title of this thread makes it clear that this is only for models G998U and G998U1. So kindly delete your posts, and keep them in your own thread
Okay, post deleted, but it's probably worth noting that you don't know what the G998W is. Because it's the same phone as the U and U1. During the One UI 3.0 Beta on the S20 Ultra, I flashed G988U on my G988W, and when the beta continued onto the U1, I flashed those firmware files as well. The Canadian S20/S21 is just a non branded T-Mobile with more supported radio bands in the firmware.
If you actually look at the carrier info for the S20 Unlocked U/U1/W firmware, they all say XAC and XAA at the bottom no matter whether it's U/U1/W. They are all the same phone and Samsung even uses the same firmware merged, just different radio bands, and because Canadian radio bands support ALL bands, it makes the W firmware the a merge of both U and U1, so it's actually the better choice from what you have posted because it supports every U/U1/W the best. So your post is relevant to the W models whether you want to accept it or not.
That's why I included a link to the firmware, because it's the same device, same flashing process, completely same procedure, so this thread IS relevant to the W models even if you said U and U1 only, the W is also included in that even if you didn't say it was, doesn't make it true.
Also the only difference between U and U1 is U is unlocked but INCLUDES carrier bloat, U1 is unlocked and has NO carrier bloat.
So, closing info here.
U1 is unlocked, no carrier bloat, US radio bands
U is unlocked, HAS carrier bloat, US radio bands
W is unlocked, no carrier bloat, ALL radio bands
You just need to make sure it's the SM-G998W for AXC and it's the best choice with no bloat.
Just because you clearly didn't know this about the W phones, doesn't mean you gotta get all snappy, I'm just trying to help the community.
bANONYMOUS said:
Okay, post deleted, but it's probably worth noting that you don't know what the G998W is.
Click to expand...
Click to collapse
I'm absolutely very well aware of what W models are. Thanks.
Then why are you mad I included it when it's the same device? I don't get why you're being salty about it. I'm just trying to help out.
bANONYMOUS said:
Then why are you mad I included it when it's the same device? I don't get why you're being salty about it. I'm just trying to help out.
Click to expand...
Click to collapse
1. Not mad at all
2. It's the same device internally, yes. But this thread is about software - not hardware. And the software being discussed is the USA firmware, not the Canadian firmware.
sorry I've also been out of the firmware game for a while too. I have a U1 from Samsung unlocked S21 Ultra and need to put the ATT carrier firmware on it. If I'm reading this right, I'm using Odin and flashing the XAA U1 firmware without a sim, when it reboots and reads updated SIM carrier setting at reboot then I am shutting it down and immediately attempting to install the ATT U1 firmware (all BL, AP, CP, CSC (non HOME CSC)? I don't see where I would select USERDATA but I need the ATT options (was going to exchange it but I got all the incentives)
alfredtv said:
sorry I've also been out of the firmware game for a while too. I have a U1 from Samsung unlocked S21 Ultra and need to put the ATT carrier firmware on it. If I'm reading this right, I'm using Odin and flashing the XAA U1 firmware without a sim, when it reboots and reads updated SIM carrier setting at reboot then I am shutting it down and immediately attempting to install the ATT U1 firmware (all BL, AP, CP, CSC (non HOME CSC)? I don't see where I would select USERDATA but I need the ATT options (was going to exchange it but I got all the incentives)
Click to expand...
Click to collapse
1. If your phone is already running U1 firmware, there's no need to flash it again
2. If you don't see the USERDATA slot, you have a very old version of Odin
It is running U1 but I need the ATT bloatware.....I'm on FirstNet and the only way it will connect correctly is if it's running the ATT built in config files. So I'm trying to go from clean to dirty!!

Flashing firmware from a different region

Hi all, I'm new to modding in general so there's many things I don't quite understand, hoping somebody can help.
I bought an S10 from a site which was supposed to just send me a refurbed (italian) S10, instead they sent me the US version, (G973U) and I believe it is carrier locked since it's stuck with Android 9 and doesn't find any update.
I have tried searching to no avail what I should flash to simply unbrand it, and allow it to receive OTA updates without tripping Knox.
The build version is the following: PPR1.180610.011.G973USQU2ASGC and the CRC is XAA/XAA/ATT
Thanks in advance.
You shall call them.
Who and what for? I'm past the point of dealing with those sellers, I just want to flash the phone.
CSC (not CRC).
XAA is a multi-region USA ROM, so I don't think it will change over properly for you in Italy. There are threads here for how you reflash a different ROM. The one I used for my S10+ was this one: https://forum.xda-developers.com/t/...e-links-and-flashing-discussion-here.3905897/ but I am sure there is one like that for your S10 non-plus... find it, follow the instructions, and you should be all set.
Thanks! I'm a newbie, what does it mean it wouldn't change properly? No OTAs? Tripping KNOX?
I have found this which seems to be the equivalent of the link you posted.
So, I should flash the U1 version right? However I see only a file "SAU - 1 - ....", and my build number doesn't end in that, furthermore I don't know which bootloader version I'm at.
lrzfc said:
Who and what for? I'm past the point of dealing with those sellers, I just want to flash the phone.
Click to expand...
Click to collapse
Oh ok. I couldn't understand first.
For that, You'll flash in EDL mode. But the problem is if your device is powered by a snapdragon chip, it'll not working seamlessly.
FardinIslam said:
Oh ok. I couldn't understand first.
For that, You'll flash in EDL mode. But the problem is if your device is powered by a snapdragon chip, it'll not working seamlessly.
Click to expand...
Click to collapse
No problem. I'm aware of the mode I have to enter to flash, as above I'm trying to figure out which stock rom I should flash to avoid tripping knox, and to receive OTAs. What won't work seamlessly?
Well, mods can close the thread, found the way to do it. Leaving it in case somebody ever needs it.
First, found & checked the bootloader version (5th number from the right in the build version) since you can only flash older bootloader versions apparently.
Then downloaded through Frija the rom for the unlocked phone variant (SM-G973U1) and the unbranded CSC (XAA)
Then using odin 3.13.3b flashed the rom
Watch this video
lrzfc said:
Well, mods can close the thread, found the way to do it. Leaving it in case somebody ever needs it.
First, found & checked the bootloader version (5th number from the right in the build version) since you can only flash older bootloader versions apparently.
Then downloaded through Frija the rom for the unlocked phone variant (SM-G973U1) and the unbranded CSC (XAA)
Then using odin 3.13.3b flashed the rom
Click to expand...
Click to collapse
Hello, I'm in more or less same situation. When you flashed, which files did you use? All of them or just the AP_*** file?
Never mind. Flashed it anyway, now I don't see the AT&T startup screen anymore which is promising. Firmware version is now Android 11 (SM-G973U1 and not SM-G973U) on XAA CSC. Will see if I get any firmware updates later.

Question THE PATCHED ODIN VS THE NORMAL ONE

So I'm trying to flash Verizon SM-G998U1 firmware on my Verizon SM-G998U S21 Ultra. Wanted to find out if I'll need the Patched Odin Vs. the Normal Odin. I hear the Patched Odin is the way to go for someone trying to flash firmware when moving between regions but I wanted to find out if my scenario is better dealt with the Patched Odin or the normal one. Just looking for a little guidance. Already have the latest Verizon SM-G998U1 firmware downloaded. And now I'm looking into getting the correct Odin to use when flashing my phone.
only use the patched version

Question Decrypted stock firmware - Global

Hello, dear fellow 8i-Users!
I got this device just a few days ago. It is running on A32 global firmware and wasn't offered an OTA update.
So far, I have unlocked, rooted and installed TWRP, following the guide provided here.
As I like my phones to be encrypted, I guess I will stay with stock firmware so far. I'm finding it a bit sad though that I wasn't offered an OTA update and therefore am stuck with security patches dated back to November 2021.
Therefore my question: Does anyone happen to have decrypted versions of a newer version of global firmware? And if so: Is it possible to dirty flash these in TWRP?
Thank you!
Cheers,
VV
VIncentVegan said:
Is it possible to dirty flash these in TWRP?
Click to expand...
Click to collapse
I doubt it will be possible to flash full ROM through TWRP unless you prepare extra files (like scripts which do the actual work).
Anyway you can decrypt the official firmware (the ones in OFP-format) by youself and flash it with SPFlashTool.
Here are few hints for you:
Download the version you like from here.
Decrypt it with oppo_decrypt
Merge super.img for the region you need (refer to super_map.csv to find out which parts need to be merged; refer to this comment for instructions)
Flash with SPFlashTool in Download Only mode (refer to this guide)

Categories

Resources