privilege escalation3 articles
Bad Epoll: The Linux Root Bug That Anthropic's AI Walked Right Past
A newly discovered Linux kernel vulnerability called Bad Epoll (CVE-2026-46242) allows unprivileged users to gain root access by exploiting a use-after-free race condition in the kernel's epoll code, affecting Linux desktops, servers, and Android devices. Researcher Jaeyoung Chung developed a highly reliable exploit that succeeds roughly 99% of the time, and notably can be triggered from within Chrome's renderer sandbox. A fix is available via upstream commit a6dc643c6931, though there is no workaround since epoll cannot be disabled, and an Android-specific exploit remains in development.
AI Is Finding Linux Bugs Faster Than Anyone Can Fix Them. That's Not Going Away.
Recent Linux vulnerabilities like Dirty Frag, Copy Fail, and Fragnesia highlight a growing trend of AI tools rapidly discovering kernel-level security flaws, with Linus Torvalds noting that bugs are now being publicly analysed within hours of being patched. The mean time to exploit vulnerabilities has shrunk dramatically — turning negative, meaning exploits often appear before patches do — and duplicate AI-generated bug reports are burdening already stretched maintainers. Experts stress that Linux hasn't become inherently less secure, but that AI's superior bug-detection capabilities demand greater security vigilance from administrators, including enforcing stricter security policies like SELinux in restrictive mode.
Nine-Year-Old Linux Kernel Bug Quietly Handed Root Access to Anyone Who Asked
A security flaw sitting undetected in the Linux kernel for nine years has been found to allow unprivileged users to execute commands as root on a wide range of major distributions.