Amazon Echo Show 5 (amazon-checkers)
| NOTE: The device runs on armv7 despite the SoC theoretically supporting aarch64, this is because the downstream kernel is armv7 |
| This device runs a Downstream kernel. Some UIs will not work, and most features (3D acceleration, audio, etc.) may be broken. |
|
First gen Echo Show 5 | |
| Manufacturer | Amazon |
|---|---|
| Name | Echo Show 5 (1st Gen, 2019 Release) |
| Codename | amazon-checkers |
| Model | H23K37 |
| Released | 2019 |
| Type | tablet |
| Hardware | |
| Chipset | MediaTek MT8163 |
| CPU | Quad-core 1.3 GHz Cortex-A53 |
| GPU | Mali-T720 |
| Display | 960x480 |
| Storage | 8 GB |
| Memory | 1 GB |
| Architecture | armv7 |
| Software | |
Original software The software and version the device was shipped with. |
Android (Fire OS) 7.1.2 (FireOS 6.5.3.1) |
Extended version The most recent supported version from the manufacturer. |
Android (Fire OS) |
| Optional software | Android (LineageOS) (Unofficial) |
| FOSS bootloader | no |
| postmarketOS | |
| Category | downstream |
Mainline Instead of a Linux kernel fork, it is possible to run (Close to) Mainline. |
no |
pmOS kernel The kernel version that runs on the device's port. |
4.9.77 |
Unixbench score Unixbench Whetstone/Dhrystone score. See Unixbench. |
591.9 |
| Device package |
|
| Kernel package |
|
Flashing Whether it is possible to flash the device with pmbootstrap flasher. |
Works
|
|---|---|
USB Networking After connecting the device with USB to your PC, you can connect to it via telnet (initramfs) or SSH (booted system). |
Works
|
Screen Whether the display works; ideally with sleep mode and brightness control. |
Works
|
Touchscreen |
Works
|
Stylus |
Untested
|
| Multimedia | |
3D Acceleration |
Broken
|
Camera |
Untested
|
| Connectivity | |
WiFi |
Works
|
Bluetooth |
Broken
|
GPS |
Untested
|
| Miscellaneous | |
USB OTG USB On-The-Go or USB-C Role switching. |
Untested
|
| Sensors | |
Ambient Light Measures the light level; used for automatic screen dimming in many interfaces. |
Untested
|
Proximity |
Untested
|
Power Sensor Sensor to monitor current, voltage and power. Not fuel gauge! |
Untested
|
Contributors
Users owning this device
- Akku (Notes: Unlocked with amonet, running LineageOS 18.1, mainlining)
- BenTheTechGuy (Notes: Running Echo Ship 1.1 (not unlockable yet)))
- R0rt1z2 (Notes: Unlocked with amonet, UART wires soldered)
- User0 (Notes: boots pmOS)
How to enter flash mode
Your bootloader must be unlocked using amonet.
The exploit remaps the volume buttons to switch between boot modes, so with it installed you can use them to select different boot options:
- HACKED FASTBOOT mode: Access this mode by holding ONLY the Volume Down key after connecting the power source.
- TWRP / RECOVERY mode: Enter this mode by holding ONLY the Volume Up key and the after connecting the power source.
- PWNED USBDL mode: Enter this mode by holding ONLY the MUTE and VOLUME DOWN buttons while connecting the power source. The USB cable MUST also be connected.
You can also use the boot-recovery.sh and boot-fastboot.sh scripts to force either mode if the buttons aren't available.
In PWNED USBDL mode, you can use tools like MTKClient to flash the device. It is important that you NEVER modify LK, TEE1, or Preloader, as they are required for the exploit to function.
You can boot OSS bootloaders by flashing them to the expdb partition and OSS ATF by flashing it to the TEE2 partition.
Installation
After booting into "hacked fastboot" mode, follow the instructions on Installation. As flashing via fastboot is very slow, you might want to try flashing over netcat instead.
UART
UART access is available through the TP55 pad (labelled in blue - RX). The baud rate is 921600.

See also
- Original Amazon Kernel
- Mainline kernel
- Bootloader unlock (+root,twrp) exploit
- pmaports!7195 Initial merge request