New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-26 13:57 UTC
  • Importiert: 2026-07-02 12:54 UTC
  • CVSS: 7.8
  • Quelle-ID: thn_global
  • uid_hash: c1bbcfb3ce3e35ec1b4d143b849277317bc613193672dc6174dddf2eecca0b09

Inhalt

A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user gain root on affected systems.

CVE-2026-46331, nicknamed "pedit COW," is an out-of-bounds write in the packet-editing action (act_pedit) that corrupts shared page-cache memory. A public, working exploit appeared within a day of the CVE assignment on June 16. Red Hat rates the flaw as

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-46331

HIGH

7.8

HIGH

7.8

2026-06-16

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews