Sony Awards $50,000 for PS5 Flaw That Could Run Linux

Sony has paid 50,000 USD to a security researcher known as Jordy after he reported a vulnerability that, according to the report, could enable running Linux on a PlayStation 5. Sony's bug bounty program validated the submission and issued the reward.

Jordy says personal pressure, including care for a terminally ill mother, helped push him to disclose the issue. Financial incentive was part of the decision, he adds, but a larger concern was that a third party already had access to the same flaw and could disclose or exploit it independently.

Origins and community reaction

The initial discovery has been attributed to another researcher who first reached the vulnerability about a year before the report reached Sony. That original finder intended to keep details secret until the release of GTA 6 so users could take advantage before patches closed the hole. Jordy later arrived at the same technical path with the help of artificial intelligence tools.

Keeping the vulnerability private might have helped development of unofficial tools, the wider use of Linux on PS5, and broader user access to the console's hardware. The presence of a third party changed the calculus, Jordy says, removing any guarantee the technical secret would remain private.

Sony confirmed the claim and paid the 50,000 USD bounty. After receiving the payment, Jordy posted an image of the reward on Twitter and wrote, "I think I can at least buy GTA with the money." The post has attracted roughly 1.8 million views to date.

Reaction was sharply divided. Some community members called the disclosure a model of responsible reporting; others argued that delivering the details to Sony eliminated a public opportunity to use the flaw. Jordy pushed back on critics, saying he is close to 30 years old, that other people’s inability to run unlicensed copies of games does not concern him, and that he had no interest in enabling widespread mod creation for games.

A segment of the console-hacking community argued the vulnerability should have been kept hidden, noting Sony's stated plan to phase out physical discs by 2028.