A new Xbox Series X, Xbox Series S and Xbox One SystemOS kernel exploit called Collateral Damage was released online today, giving users total control over the SystemOS virtual machine to do things normally not possible in retail mode.
The Collateral Damage exploit, which was developed by Emma Kirkpatrick and Lander Brandt, targets systems running kernel versions 25398.4478, 25398.4908, and 25398.4909 and uses the Game Script UWP application. As explained by one of the exploit’s developers on X/Twitter, this isn’t a jailbreak, as SystemOS is the virtual machine where apps run, which is the same environment users get control over when enabling dev mode. As such, the exploit doesn’t allow piracy but essentially gives users full control of SystemOS without dev mode.
Being the first release, the Collateral Damage Xbox Series X and Xbox Series S exploit is not fully reliable, as it relies on a CPU side channel as well as race conditions, which can fail. In case they do fail, the console will simply crash and reboot, so there should not be any danger of bricking a system. Additionally, the exploit is best used offline for obvious reasons.
Even without this exploit, which could definitely lead to some interesting developments, the Xbox Series X and Xbox Series S were already homebrew-friendly systems thanks to dev mode. Multiple emulators for older gaming systems can already run on the systems, and some recent developments may lead to Microsoft’s current-generation systems emulating PlayStation 3 games even before the PlayStation 5.
