Skip to content
NewA calmer, faster ZeroHour

New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

The Hacker Newsby @TheHackersNews ()3 min read2 · 1 read
Analyze CVE-2026-46331 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-46331
Linux kernel: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for…
7.8<1%PoC

From the original article

3 min read at thehackernews.com

A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user gain root on affected systems. CVE-2026-46331 , nicknamed " pedit COW ," is an out-of-bounds write in the packet-editing action (act_pedit) that corrupts shared page-cache memory. A public, working exploit appeared within a day of the CVE assignment on June 16.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.