Architectural Teardown

KernelSU vs APatch: Kernel Driver vs KernelPatch Inline Hooking (2026)

Architectural comparison of KernelSU and APatch. Learn the differences between GKI kernel drivers and KernelPatch inline binary patching.

Core Architectural Difference in 30 Seconds

KernelSU is a native kernel driver integrated into the Generic Kernel Image (GKI) source code during compilation.
APatch is a binary patcher that injects KernelPatch routines directly into an existing, pre-compiled stock kernel image without requiring source code recompilation.

Head-to-Head Comparison: KernelSU vs. APatch

Category KernelSU APatch
Implementation Kernel Driver (Built into GKI kernel) Binary Inline Patch (KernelPatch)
Kernel Range Linux 5.10+ (GKI) or Custom Kernel Linux 3.18 to 6.12 (Legacy & GKI)
Source Code Required Yes (if compiling for non-GKI devices) No (Patches pre-compiled stock boot.img)
Authentication App Manager UI whitelist SuperKey Master Hash Key
WebUI Modules Yes (KernelSU WebUI Module standard) Yes (APatch WebUI Module standard)

Which Kernel-Level Root Should You Choose?

  • Choose KernelSU if: You have a phone running GKI (Pixel 7/8/9, Galaxy S23/S24/S25, OnePlus 11/12/13) and want an official, standardized kernel driver.
  • Choose APatch if: You have an older phone (Xiaomi Redmi Note 10, Galaxy S20, etc.) with a 4.14/4.19 kernel and want kernel-level root without hunting down custom kernels.
Technical Verification & Review Standard:
Last Reviewed: August 19, 2026 • Verified With: Magisk v30.7, KernelSU v1.0+, APatch v10.7+, and Shizuku v13.5+.