Post #3628646

A couple things this morning. CVE-2026-46242 "Bad Epoll" Linux kernel, CVSS 7.8, local privilege escalation was already mentioned CVE published around May. 1: What's new today: it is now fully weaponized and publicly written up. It's a use-after-free race in the kernel's eventpoll subsystem (ep_remove()/ep_remove_file()). An unprivileged local user can win a race condition and get root. 2: Affected: kernel 5.10 through 6.11. 3: The Attack surface is broad because epoll underlies nginx, Node.js, Python asyncio, databases, Android's event loop. So, basically anything async I/O. An App can be the foot in the door, the race condition can lead to root. I'm running Kernel 6.12.94+deb13-amd64. So driving on. #minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit