A major PlayStation hacking project has been thrown into uncertainty after a dispute over a PS5 hypervisor exploit. TheFlow, a prominent console researcher, has announced he is leaving the PS5 scene after another hacker reported the vulnerability to Sony through HackerOne.
The fallout could affect efforts to run Linux on newer PS5 hardware, potentially turning the console into a Steam Machine. It may also prevent the planned combination of PS5 Linux support and access to Grand Theft Auto 6 on current firmware.
How the PS5 Linux project began
Earlier this year, TheFlow demonstrated a modified PS5 running Linux and playing Grand Theft Auto 5 with ray tracing enabled. The initial version worked only on consoles using older firmware, but the longer-term goal was to support newer systems, including the PS5 Pro and more recent Sony updates.
TheFlow showed a PS5 running Linux as a Steam Machine, with GTA 5 Enhanced operating with ray tracing. The demonstration was shared on March 6, 2026. pic.twitter.com/aMbT0PQ1dS
The project relied on a vulnerability in the PS5 hypervisor, a core part of the console’s anti-piracy and anti-tampering security. TheFlow had reportedly intended to delay wider disclosure until after GTA 6 launched.
That timing mattered because GTA 6 is expected to require a digital purchase through the PlayStation Network. Players buying it digitally would need a recent PS5 firmware version, while a Sony update could close the hypervisor vulnerability and remove the Linux route. TheFlow was therefore working towards a broader release, with PS5 Pro support and a possible 2027 launch discussed.
A second researcher reports the exploit
On September 15, another hacker known as Jordy submitted the same hypervisor vulnerability to Sony through HackerOne. Jordy said he had discovered it independently with the help of AI tools, rather than receiving the information from TheFlow.
Jordy also said TheFlow had asked him not to disclose the vulnerability until after GTA 6 was released. When a third hacker allegedly found the same flaw, Jordy decided to report it, saying he believed someone else might soon claim the HackerOne reward. The report could potentially be worth thousands of dollars if Sony verifies the exploit.
Community discussion has also highlighted reports that Jordy’s mother has a terminal illness, leading some observers to argue that the financial reward could be particularly important to him.
TheFlow ends his PS5 work
The disclosure appears likely to prompt Sony to patch the exploit in a future firmware release. In response, TheFlow said he was ending his PS5 hacking work and abandoning his Linux plans.
TheFlow said he was stepping away from the PS5 scene and stopping work on PS5 Linux. He described the decision as the loss of months of work, including planned PS5 Pro support and a 2027 release, and criticised researchers who use large language models without understanding the resulting hacks. The statement was posted by TheFlow.
Although TheFlow did not identify the person directly, many members of the community connected his comments with Jordy. Jordy acknowledged that TheFlow had asked him to wait, but said he reported the vulnerability after another person independently discovered it.
Jordy said the hypervisor bug he submitted to HackerOne was also known to TheFlow. His explanation was that he had agreed not to report it, then changed course after someone else found the same bug with AI assistance. The explanation was posted on September 16, 2026.
Jordy later shared a screenshot that allegedly showed another community member sending an abusive message about his mother. The dispute has since divided online commentators between those supporting Jordy’s decision to seek a reward and those siding with TheFlow’s attempt to preserve the exploit for the Linux project.
What happens to PS5 Linux now?
The disagreement has become a wider argument about responsible disclosure, private bounty programmes and the role of AI in security research. Some community members believe Jordy surrendered an exploit that could have allowed more PS5 owners to use Linux while retaining access to GTA 6.
Others argue that Jordy found the vulnerability himself and was entitled to report it, particularly given his reported financial circumstances. A separate community-funded reward of more than $37,000 was also discussed as a possible alternative, although accepting it could have complicated either hacker’s ability to pursue PlayStation rewards through HackerOne.
Other developers may continue the PS5 Linux work, but a Sony patch could make support for newer consoles considerably more difficult. The immediate advice circulating among jailbreak users was to avoid updating after Sony released a new PS5 firmware version on Wednesday.
The episode is a reminder that console modding depends on more than technical breakthroughs. Disclosure agreements, platform updates, reward systems and personal circumstances can all determine whether an ambitious hardware project reaches the public.
For more gaming and hardware stories, browse RETROCADE’s Arcade Blog, explore available arcade machines, or see how enthusiasts approach hands-on projects with DIY arcade kits.
Leave a Reply