[CVE-2026-46242]

July 6, 2026

• Bad Epoll (CVE-2026-46242) now has a public PoC — J-jaeyoung/bad-epoll — for the Linux kernel epoll use-after-free that turns an unprivileged user into root on 6.4+ kernels (and potentially newer Android), with the researcher reporting 99% reliability and a possible trigger path from Chrome's renderer sandbox (The Hacker News). · Vulnerabilities & Exploits

in The Gentlemen Weaponize a Signed Kontron Driver Into an EDR Killswitch

July 4, 2026

• "Bad Epoll" (CVE-2026-46242) gives local users root on Linux 6.4+ and newer Android. The kernel flaw sits in the same stretch of code where Anthropic's Mythos model recently found a different bug; the PoC reached 99% reliability and may be triggerable from the Chrome renderer sandbox. A fix is out. The Hacker News · Vulnerabilities & Exploits

in Silent Active Directory Recon and a Near-Perfect Linux Root Exploit Lead the Offensive Beat