{"id":285430,"date":"2026-07-03T15:40:00","date_gmt":"2026-07-03T19:40:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/07\/03\/new-bad-epoll-linux-kernel-flaw-lets-unprivileged-users-gain-root-hits-android\/"},"modified":"2026-07-03T16:45:07","modified_gmt":"2026-07-03T20:45:07","slug":"new-bad-epoll-linux-kernel-flaw-lets-unprivileged-users-gain-root-hits-android","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/07\/03\/new-bad-epoll-linux-kernel-flaw-lets-unprivileged-users-gain-root-hits-android\/","title":{"rendered":"New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android"},"content":{"rendered":"

New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android<\/a><\/p>\n

https:\/\/thehackernews.com\/2026\/07\/new-bad-epoll-linux-kernel-flaw-lets.html<\/a><\/p>\n

Publish Date: 2026-07-03 15:40:00<\/a><\/p>\n

Source Domain: thehackernews.com<\/a><\/p>\n

A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root. It affects Linux desktops, servers, and Android, and a fix is out.<\/p>\n

Bad Epoll sits in the same small stretch of kernel code where Anthropic’s most powerful AI model, Mythos, recently found a different bug.<\/p>\n

The AI caught one flaw and missed this one. A researcher, Jaeyoung Chung, found it and built a working attack.<\/p>\n

How the Bug Works<\/h2>\n

Epoll is a standard Linux feature that lets a program watch many files or network connections at once. Servers, network services, and web browsers all lean on it. You cannot simply switch it off.<\/p>\n

Bad Epoll is a “use-after-free” bug. Two parts of the kernel try to clean up the same internal object at the same time. One frees the memory while the other is still writing into it. That brief collision lets an attacker corrupt kernel memory, then climb from a normal account up to root.<\/p>\n

The catch is timing. The window where the two paths collide is only about six machine instructions wide, so a random attempt almost never lands in it. Chung’s exploit widens that window and retries without crashing, reaching root about 99% of the time on tested systems.<\/p>\n

\"Cybersecurity\"<\/p>\n

Two things make it more dangerous: by his account, it can be triggered from inside Chrome’s renderer sandbox, which blocks almost every other kernel bug, and it can reach Android, which most Linux privilege bugs cannot.<\/p>\n

Chung submitted the flaw as a zero-day to Google’s kernelCTF program, and full technical details are in his\u00a0public writeup. There is no sign it has been used in real attacks: as of this writing, it is not on CISA’s Known Exploited Vulnerabilities list, and the only working code is that kernelCTF proof of concept. An Android version of the exploit is still in progress.<\/p>\n

Both bugs trace back to a single 2023 change to the epoll code. Chung says Mythos found the first of the two, now tracked as\u00a0CVE-2026-43074, with a…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android https:\/\/thehackernews.com\/2026\/07\/new-bad-epoll-linux-kernel-flaw-lets.html Publish…<\/p>\n","protected":false},"author":1,"featured_media":285431,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEggOXDckpE46PYIzBnXsx_kyHzFvlcB3l8qEr6feRNBhRQMKc2p5r2pQArl-NrsoB2z6vE917nXVHpuuMZOgZcRDMlwbVYC0ocK3uIsb-h59qed_kuvDKwvukQCAs-VDcE5Ail8mTRSPpnNfrPzKv5oAMQ9fJCDNE_2PpPrN9a9mOwGUIs0TnWq6_r58HM\/s1700-e365\/root-linux.gif","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[20,90,89],"class_list":["post-285430","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-artificial-intelligence","tag-cve","tag-flaw"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/285430"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=285430"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/285430\/revisions"}],"predecessor-version":[{"id":285432,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/285430\/revisions\/285432"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/285431"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=285430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=285430"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=285430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}