Bad Epoll (CVE-2026-46242)
51 points by dzwdz
51 points by dzwdz
This being reachable from the Chrome sandbox is a really big deal, and it's kind of surprising to me that it both was reported as part of kCTF and only got $71k.
If you are saying it is curious why this wasn't sold to market with far higher price, I think we lucked out it was discovered by a PhD student in a computer security lab.
Bryan Cantrill was right again
Would you be so kind and provide some context? :)
Bryan has mentioned that he dislikes epoll. From his prospective it’s an api that’s hard to hold and can cause heavy cognitive load on the consumer. It’s a “good enough” api when compared to kqueue
There’s some podcasts with the bsd cast where he mentions it but I can’t find the episode right now.
Another concern was along the lines of the parents getting stale messages from a child that dosent exist (verify this because it’s off the top of the dome)
Edit I believe it’s somewhere in this podcast:
Don't be misled by the seemingly empty repo, the exploit is linked near the bottom of the README. I haven't tested it yet. There's no mitigation.
The authors also claim it roots Android, so knowing the Android ecosystem I guess I'm looking forward to my vendor shipping the patch in maybe a month or so. Oh, and it works from the Chrome renderer sandbox too.
I bought an android phone in 2023, and the last kernel update was mid 2024. This bug is rrom that time, if you get a patch, you might be of the few
I actually thought my phone's ROM was using the mainline kernel, so that's why I said that. Turns out I'm on 5.4... which at least isn't vulnerable, so there's that.
Many Linux distributions may be affected if they use kernels based on v6.4 or newer and have not yet backported the fix. Check your distribution's kernel security updates for a backport of the fix commit above. Older v6.1-based kernels are not affected because the bug was introduced in v6.4.
Aww. I was hoping this would become a good way to root phones, but I suspect that’s too new to be particularly useful. My phone’s on 5.15.
Is there any information on this was discovered? It was missed by Mythos, but was this found with assistance of another LLM or just by human review? If so why look into this place?