If you haven’t seen it:
> Bad Epoll (CVE-2026-46242) is a race-condition use-after-free in the #Linux kernel's epoll subsystem. This bug lets an unprivileged process become root, not only on Linux desktops and servers but also on Android devices.
https://github.com/J-jaeyoung/bad-epoll
Linux v7.1, v7.0.10+, v6.18.33+ are fixed (already running on my NixOS VMs, so I did not have to do any updates for this one)
Michael Stapelberg 🐧🐹😺
npub1s0…0tnkj
2026-07-05 19:49:14 UTC
Author Public Key
npub1s050x4yvg6dfrffppghy02dhgdx5k5dk4shhyt2fpma6jt7dtttqx0tnkjSeen on
wss://relay.momostr.pinkPublished at
2026-07-05 19:49:14 UTCEvent JSON
{
"id": "29fbab8693eae23e476da2cb392fb86e541fe4adae80965be76c2b0bcb1098a5",
"pubkey": "83e8f3548c469a91a5210a2e47a9b7434d4b51b6ac2f722d490efba92fcd5ad6",
"created_at": 1783280954,
"kind": 1,
"tags": [
[
"t",
"linux"
],
[
"proxy",
"https://mas.to/@zekjur/116869100629789738",
"web"
],
[
"proxy",
"https://mas.to/users/zekjur/statuses/116869100629789738",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mas.to/users/zekjur/statuses/116869100629789738",
"pink.momostr"
],
[
"-"
]
],
"content": "If you haven’t seen it:\n\n\u003e Bad Epoll (CVE-2026-46242) is a race-condition use-after-free in the #Linux kernel's epoll subsystem. This bug lets an unprivileged process become root, not only on Linux desktops and servers but also on Android devices.\n\nhttps://github.com/J-jaeyoung/bad-epoll\n\nLinux v7.1, v7.0.10+, v6.18.33+ are fixed (already running on my NixOS VMs, so I did not have to do any updates for this one)",
"sig": "064588d675f9ff07d9ccfad868767c483b0b2eb6340b352fd9083e5837ca773af995cd91b3a651c44056ef75a6521e890a0e21ac2337089db2987d4dd2d84d55"
}