BRIEFING · Fast coverage. Original reporting credited below.

What happened: A newly disclosed Linux kernel flaw named Bad Epoll (CVE-2026-46242) lets an ordinary local user with no special privileges escalate to full root, as reported by The Hacker News. It affects Linux desktops, servers, and Android. A fix has been released.

Why it matters: Local privilege escalation is the second half of most real intrusions. An attacker rarely lands as root; they land as a low-privilege user through phishing, a web app bug, or a stolen session, then use a flaw like this to own the machine. Because Bad Epoll reaches Android too, the exposed fleet is enormous. The gap that matters is not whether a fix exists, it is how fast you can confirm the patch actually reached every affected host and device.

What to do now:

• Apply the kernel update across Linux servers, workstations, and your Android fleet

• Prioritize multi-user and internet-facing hosts, where a low-privilege foothold is most likely

• Verify patch coverage rather than assuming it, since kernel updates usually need a reboot to take effect

Sources: The Hacker News