New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

A newly discovered Linux kernel vulnerability poses a significant threat to systems worldwide, potentially allowing unprivileged users to escalate their privileges to root level. Dubbed "pedit COW," this flaw in Linux's traffic-control subsystem represents a serious security concern for organizations running the popular open-source operating system.

The vulnerability, tracked as CVE-2026-46331, exists within the kernel's packet-editing action component known as act_pedit. The security weakness stems from an out-of-bounds write issue that can corrupt shared page-cache memory. By exploiting this flaw, a local attacker without special privileges could potentially gain complete control over an affected system through root access. What makes this particularly concerning is the rapid emergence of a working public exploit, which surfaced just one day after the CVE was