Technical details and PoC code for CVE-2026-46242, also known as Bad Epoll, are now public and show how the Linux kernel flaw can be used to gain root privileges. The issue affects Linux desktops, servers, and Android phones, including Pixel 10 devices, through a race-condition use-after-free bug in epoll. #CVE-2026-46242 #BadEpoll #Pixel10
Keypoints
- CVE-2026-46242 is a race-condition use-after-free bug in epoll.
- The flaw can let unprivileged users gain root privileges.
- It affects Linux systems running kernel 6.4 or newer.
- The bug was discovered by Jaeyoung Chung and reported to Google kernelCTF.
- PoC code can leak kernel memory and enable ROP-based exploitation on Pixel 10 devices.