New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

The 'Bad Epoll' vulnerability (CVE-2026-46242) is a use-after-free bug in the Linux kernel that allows unprivileged local users to escalate privileges all the way to root, affecting a massive surface area including Linux servers, desktops, and Android devices. What makes this flaw particularly dangerous is its exploitability from within Chrome's renderer sandbox, meaning a compromised browser process could be leveraged to fully compromise the underlying operating system. This illustrates how layered defenses can be bypassed when foundational components like the kernel contain critical flaws. The widespread deployment of Linux across enterprise infrastructure and the Android ecosystem means delayed patching leaves billions of devices exposed. Organizations that lack rapid kernel patching processes or automated vulnerability tracking will be disproportionately at risk.