Bottom line: CVE-2026-46242 allows unprivileged users on Linux and Android to gain root access; a patch exists and should be deployed promptly.
A newly discovered vulnerability in the Linux kernel (CVE-2026-46242) enables users without special privileges to gain complete root control over the system. The security flaw affects Linux desktops, servers, and Android devices; a patch is available.
The flaw is named “Bad Epoll” and is located in a small section of kernel code where Anthropic’s advanced AI model Mythos recently identified another vulnerability. The scenario illustrates the limitations of automated vulnerability detection: the AI model found a security flaw in this code area but missed Bad Epoll.
For CISOs, the vulnerability is critical because an unprivileged local attacker without special access rights can gain complete control over the system. All common Linux distributions on desktop and server systems as well as Android devices based on the affected kernel versions are affected.
The availability of a patch means that organizations should act promptly: deploy kernel updates to systems and ensure that all desktop, server, and mobile end devices receive the latest version. The security flaw poses a high risk because exploitation requires no authentication or physical access.
Source: thehackernews.com · Published July 3, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.2.