Researcher Jaeyoung Chung finds a flaw in epoll - a core Linux mechanism a program uses to watch many files and connections at once. Through it, an ordinary user with no privileges at all can escalate to root, meaning full control of the machine. And since epoll is everywhere, the hole catches desktops, servers, and Android.
Fact
The facts: Bad Epoll (CVE-2026-46242) is a use-after-free - two parts of the kernel free the same object at the same time, while one of them is still writing to it, and this collision allows memory corruption and escalation to root. epoll can't simply be turned off. A patch already exists. Bad Epoll is one of the rare bugs that can root Android - out of roughly 130 vulnerabilities used in Google's kernelCTF (Google's bug-hunting contest), only about 10 are candidates for that. Both bugs - this one and its neighbor - trace back to a single change in the epoll code from 2023.
I've seen this combination before. 'AI found a vulnerability' looks great as a headline, but the real question is who missed what. The neighboring bug in the same short stretch of code (CVE-2026-43074, already patched) was caught by Mythos, the most powerful model made by Anthropic. The same machine passed within inches of this bug and didn't see it. That's the exact boundary of automated auditing today - it raises the floor, but it doesn't take the skeptical human out of the loop.
Running a Linux server or an Android device? The patch is already out. Put it on today.
The visual is generated code-art, no third-party images.