A newly disclosed flaw in the Linux kernel, named Bad Epoll and tracked as CVE-2026-46242, does something deceptively simple: it lets an ordinary user with no special privileges take full control of a machine as root. As The Hacker News reports, it affects Linux desktops and servers, and, because so much of the mobile world runs on the same kernel, Android too. A fix is available.

On its own, local privilege escalation can sound like a lesser problem, because it requires the attacker to already be on the machine. But that is exactly how most real intrusions work. An attacker rarely lands as root. They land as a low-privilege user, through a phishing email, a vulnerable web app, or a stolen session, and then reach for a flaw like this to become the administrator of everything. Bad Epoll is the second half of that story, and its reach across Android makes the exposed fleet enormous.

The honest gap here is not whether a fix exists, because it does. It is how quickly you can confirm the patch actually landed on every affected host and device, which for kernel updates usually means a reboot most fleets quietly defer. Roll the update out across Linux servers, workstations, and your Android estate, prioritize the multi-user and internet-facing hosts where a foothold is most likely, and then verify coverage rather than assuming it.

Sources: The Hacker News.