Linux kernel “pedit COW” bug lets unprivileged users grab root
CVE‑2026‑46331 is an out‑of‑bounds write in the kernel’s act_pedit traffic‑control module that corrupts shared page‑cache memory. A public proof‑of‑concept lets any local user gain root on unpatched RHEL 8‑10 and related platforms. Red Hat has issued an advisory and provides a quick blacklist mitigation.