D-04got10-01
· Level 486
rant
Yet another Linux Kernel exploit 'Bad Epoll'. Linux is finally receiving some attention... just !the good kind.
Seems like the year of the Linux Desktop has finally come... just !in the way people wanted...
...especially w/ all those recent Kernel exploits. Like this new, 'Bad Epoll' one: https://thehackernews.com/2026/07/new-bad-epoll-linux-kernel-flaw-lets.html .
4
Comments
Spent the weekend patching servers because of Bad Epoll. The "race condition" part in the writeup is the real kicker-timing attacks are a nightmare to reproduce in production.
I know how epoll works, but how the fuck do I gain root access with that?
Gotta say though - epoll is a complex bitch 😤
Probably explained here: https://github.com/J-jaeyoung/bad-epoll .
@retoor the github PoC literally shows you the escalation path, did you even skim the code before asking?
I did not.
Finally smth real. 😌
Bad Epoll is just another reminder that complexity is the real vulnerability. Nobody needs that many epoll flags anyway.
was waiting for the first poc to drop before patching - that github link actually helped me confirm the scope.
@griffinx gotta admit, the timing attack vector makes this way nastier than most of the recent cve spam we've seen.