June 29, 2026
- CVE-2026-46331 ("pedit COW") — a Linux kernel privilege-escalation flaw in the net/sched
act_pedittraffic-control subsystem (CVSS 7.8) — now has a public PoC (packet_edit_meme, by researcher Massimiliano Oldani). The bug is an out-of-bounds write from incorrect Copy-on-Write handling that lets an unprivileged local user poison the page cache and modify cached privileged binaries in memory to reach root, complicating on-disk detection. Patched kernels are shipping from Red Hat, Ubuntu, AlmaLinux and CloudLinux; defenders should watch for unusualtc/unshareuse and restrict unprivileged user namespaces where feasible. (Daily Dark Web, Dark Web Informer) · Vulnerabilities & Exploits
in Public Root Exploit for Linux "pedit COW" Lands as Offensive Tooling Floods the Week