Skip to main content

​
About KernelSU

KernelSU is a kernel-based root solution for Android that provides root access through kernel modifications rather than system partition modifications. It offers an alternative to Magisk with different advantages:
  • Kernel-level root: Root permissions granted at kernel level
  • System integrity: No system partition modifications
  • Module system: Similar to Magisk modules
  • Better hiding: Harder for apps to detect root
KernelSU on WSA is currently in active development and may have stability issues compared to Magisk builds.

​
KernelSU vs Magisk

Understanding the differences helps you choose the right root solution:
Magisk
  • System-level modifications
  • Modifies init process
  • Mounts overlays for systemless changes
  • Mature and stable
KernelSU
  • Kernel-level modifications
  • Patches kernel directly
  • Root granted by kernel itself
  • Newer, evolving solution
Important Limitation: KernelSU builds cannot include Google Apps (GApps). If you need Google Play Services, you must use Magisk instead.

​
Installation

​
Prerequisites

  • Windows 11 (22000.526+) or Windows 10 (22H2 10.0.19045.2311+)
  • Virtualization enabled in BIOS/UEFI
  • At least 8GB RAM (16GB recommended)
  • Compatible WSA version with KernelSU support

​
Installing WSA with KernelSU

1

Download KernelSU build

Visit the WSABuilds Releases page and download a build that includes KernelSU.Look for builds with KernelSU in the filename:
WSA_2XXX.XXXXX.XX.X_x64_Release-Nightly-with-kernelsu-XXXXX-NoGApps
KernelSU builds will always have NoGApps in the name, as they are incompatible with Google services.
2

Extract the archive

Extract the downloaded .7z file to a permanent location:
  • Recommended: C:\Users\[YourName]\Documents\WSA
  • Rename the extracted folder to WSA for simplicity
3

Run installation

Navigate to the extracted folder and double-click Run.bat.The installation script will:
  • Uninstall any existing WSA installation
  • Preserve existing user data (if any)
  • Install WSA with KernelSU
  • Register the package with Windows
4

Verify installation

After installation, WSA Settings should open automatically. Check:
  • About section shows correct WSA version
  • Subsystem resources are visible

​
Setting Up KernelSU Manager

KernelSU Manager is the app used to manage root access and modules.
1

Download KernelSU Manager

Download the latest KernelSU Manager APK:

KernelSU Manager v0.6.8

Official KernelSU Manager release
Or visit the KernelSU Releases page for the latest version.
2

Sideload the APK

Install KernelSU Manager using one of these methods:Method 1: WSA Pacman (Easiest)
# Download and install WSA Pacman first
# Then drag and drop the APK onto WSA Pacman
Method 2: ADB
# Enable Developer Mode in WSA Settings
adb connect 127.0.0.1:58526
adb install KernelSU_v0.6.8_11238-release.apk
See the Sideloading Guide for detailed instructions.
3

Launch KernelSU Manager

Open the Start Menu and search for “KernelSU” or find it in your WSA app list.
4

Verify KernelSU status

In KernelSU Manager, check:
  • Kernel version: Should match your WSA kernel
  • KernelSU version: Shows installed version
  • Status: Should show “Working” or “Installed”

​
Managing Root Access

​
Granting Root Permissions

When an app requests root access:
  1. KernelSU Manager will show a permission dialog
  2. Review the app details:
    • App name and package
    • Requested permissions
    • UID (User ID)
  3. Choose to Allow or Deny
  4. Optionally set access rules (always allow, one-time, etc.)

​
Root Permission Management

1

View granted apps

Open KernelSU Manager → Superuser to see all apps with root access.
2

Modify app permissions

Tap any app to:
  • Revoke root access
  • Change access level (root, ADB, or none)
  • View permission history
  • Configure app-specific rules
3

Configure access profiles

Create custom access profiles for different apps:
  • Full root access
  • Limited root (specific commands only)
  • ADB-only access

​
Installing KernelSU Modules

KernelSU supports modules similar to Magisk modules, with some differences.
Many Magisk modules are compatible with KernelSU, but not all. Check module documentation for KernelSU compatibility.
1

Enable Developer Mode

Open WSA Settings → Developer and enable Developer Mode.Note the IP address and port (usually 127.0.0.1:58526).
2

Connect via ADB

adb connect 127.0.0.1:58526
3

Push module to device

adb push module.zip /data/local/tmp/
4

Install module via KernelSU

adb shell su -c ksud module install /data/local/tmp/module.zip
5

Reboot WSA

Restart WSA for the module to take effect:
adb reboot

​
Installation via KernelSU Manager

1

Open Modules section

In KernelSU Manager, navigate to the Modules tab.
2

Install from storage

  • Tap the floating action button (+)
  • Select “Install from storage”
  • Browse to your module ZIP file
  • Confirm installation
3

Reboot WSA

Restart WSA after module installation completes.

​
Module Examples

# LSPosed works with KernelSU
wget https://github.com/LSPosed/LSPosed/releases/download/v1.9.2/LSPosed-v1.9.2-7024-zygisk-release.zip

adb push LSPosed-v1.9.2-7024-zygisk-release.zip /data/local/tmp/
adb shell su -c ksud module install /data/local/tmp/LSPosed-v1.9.2-7024-zygisk-release.zip
adb reboot

​
Managing Modules

In KernelSU Manager:
  1. Open Modules tab
  2. View installed modules
  3. Toggle modules on/off
  4. Remove modules by tapping trash icon
  5. Restart WSA after changes

​
KernelSU Configuration

​
Security Settings

​
Root Access Mode
select
default:"Apps only"
Control how root access is granted:
  • Apps only: Only Android apps can request root
  • ADB only: Only ADB shell has root access
  • Apps and ADB: Both can request root (default)
​
Umount Modules
toggle
default:"disabled"
Temporarily disable all modules for troubleshooting.Useful when a module causes issues.
​
Root Hiding
toggle
default:"enabled"
Enable root hiding features to prevent detection by apps.More effective than Magisk’s DenyList in theory.

​
Advanced Options

KernelSU can modify SELinux policies:
  • Enforcing: Default security mode
  • Permissive: Disable SELinux enforcement (not recommended)
Access via:
adb shell su -c getenforce
adb shell su -c setenforce 0  # Permissive
adb shell su -c setenforce 1  # Enforcing
View KernelSU kernel logs for debugging:
adb shell su -c dmesg | grep kernelsu
Boot with modules disabled:
# Disable all modules temporarily
adb shell su -c ksud module disable-all
adb reboot

​
Updating KernelSU

KernelSU is tied to the WSA kernel version and cannot be updated independently.
1

Check for updates

Visit the WSABuilds Releases page for newer KernelSU builds.
2

Download updated build

Download the latest WSA build with KernelSU.
3

Update WSA installation

Follow the updating guide to replace your installation.
Your apps, data, and KernelSU modules will be preserved during the update.

​
Troubleshooting

Symptoms: KernelSU Manager shows “Not installed” or “Unknown”Solutions:
  1. Verify you installed a KernelSU build (not Magisk)
  2. Check WSA version compatibility
  3. Reinstall WSA with a fresh KernelSU build
  4. Ensure virtualization is enabled
Solutions:
  1. Open KernelSU Manager
  2. Grant root access to the app manually
  3. Check that Root Access Mode includes “Apps”
  4. Verify app supports KernelSU (some only support Magisk)
Common causes:
  • Module incompatible with KernelSU
  • Module designed for physical devices
  • Module requires Magisk-specific features
Solutions:
  1. Check module compatibility
  2. Try installing via ADB instead
  3. Use KernelSU-specific module versions
Solution: Boot into Safe Mode:
  1. Connect via ADB from Windows: 
    adb connect 127.0.0.1:58526
  2. If that fails, uninstall and reinstall WSA
  3. Restore your data from backup
Technical reason: Google Apps require specific system modifications that conflict with KernelSU’s kernel-level approach. Magisk uses a different method that’s compatible with GApps mounting.Solution: If you need Google Play Services, use Magisk builds instead.

​
Building Custom KernelSU Builds

Advanced users can build WSA with KernelSU using MagiskOnWSALocal: 
cd MagiskOnWSALocal/scripts
./build.sh --root-sol kernelsu --remove-amazon
Remember: --install-gapps and --root-sol kernelsu cannot be used together.

​
Known Limitations

  • No GApps support: Cannot use Google Play Services
  • Module compatibility: Some Magisk modules won’t work
  • Hardware limitations: WSA virtualization limits certain features
  • Update method: Must reinstall WSA to update KernelSU
  • Development status: Newer and less mature than Magisk

​
Resources

KernelSU GitHub

Official KernelSU repository

WSABuilds Discord

Community support for KernelSU on WSA

KernelSU Documentation

Official KernelSU documentation

WSABuilds Releases

Download KernelSU builds

Build docs developers (and LLMs) love

Get started for freeTalk to us