{"id":182539,"date":"2026-07-08T10:54:16","date_gmt":"2026-07-08T08:54:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa"},"modified":"2026-07-08T10:54:16","modified_gmt":"2026-07-08T08:54:16","slug":"bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","title":{"rendered":"Bad Epoll: en s\u00e5rbarhet f\u00f6r att erh\u00e5lla root-\u00e5tkomst har uppt\u00e4ckts i Linux och Android","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/i><\/a>
1 <\/p>\n

Det har uppt\u00e4ckts en s\u00e5rbarhet i Linux-k\u00e4rnan Bad Epoll<\/strong>, registrerad som CVE-2026-46242<\/a>. Det g\u00f6r det m\u00f6jligt f\u00f6r en vanlig lokal anv\u00e4ndare utan s\u00e4rskilda r\u00e4ttigheter att h\u00f6ja sina privilegier till root. Enligt forskaren Jaejon Chon ber\u00f6r problemet inte bara Linux-skrivbord och servrar, utan \u00e4ven vissa Android-enheter med nya k\u00e4rnversioner \u2014 detta understryks s\u00e4rskilt i beskrivningen av Bad Epoll<\/a>.<\/p>\n

<\/noindex> <\/p>\n

Felet finns i subsystemet epoll<\/strong> \u2014 den standardmekanism i Linux som anv\u00e4nds f\u00f6r att sp\u00e5ra m\u00e5nga filbeskrivare, n\u00e4tverksanslutningar och I\/O-h\u00e4ndelser. S\u00e5dana mekanismer anv\u00e4nds aktivt av servrar, webbl\u00e4sare och n\u00e4tverkstj\u00e4nster, s\u00e5 att helt st\u00e4nga av epoll g\u00e5r inte. I den tekniska analysen<\/a> beskrivs s\u00e5rbarheten som en t\u00e4vling som leder till use-after-free<\/strong>: n\u00e4r relaterade epoll-objekt st\u00e4ngs samtidigt, frig\u00f6r en tr\u00e5d interna strukturer medan en annan forts\u00e4tter att referera till dem.<\/p>\n

<\/noindex> <\/p>\n

Mer specifikt uppst\u00e5r problemet vid en situation d\u00e4r en epoll-beskrivare \u00f6vervakar en annan, och b\u00e5da beskrivares st\u00e4ngs parallellt. Efter att __ep_remove() har anropats nollst\u00e4lls f\u00e4ltet file->f_ep tillf\u00e4lligt, och den konkurrerande __fput() kan best\u00e4mma att ingen ytterligare reng\u00f6ring beh\u00f6vs. Resultatet \u00e4r att objektet struct eventpoll eller den relaterade struct file frig\u00f6rs f\u00f6r tidigt, medan koden fortfarande arbetar med pekare som refererar till redan frigjord minne. Det \u00e4r just detta som ger angriparen ett medel f\u00f6r att korrumpera k\u00e4rnminnet.<\/p>\n

<\/p>\n

F\u00f6r attacken kr\u00e4vs inga ytterligare capabilities eller anv\u00e4ndarnamespaces \u2014 det r\u00e4cker med att CONFIG_EPOLL \u00e4r aktiverat, vilket g\u00f6r problemet s\u00e4rskilt obehagligt f\u00f6r vanliga Linux-system. Enligt den prim\u00e4ra rapporten fr\u00e5n forskaren<\/a>, buggen inf\u00f6rdes i k\u00e4rnan genom en commit 58c9b016e128<\/a> \u00e5r 2023, och \u00e5tg\u00e4rdades med en commit a6dc643c693<\/a>.<\/p>\n

<\/noindex> <\/p>\n

Trots det mycket sn\u00e4va tidsf\u00f6nstret f\u00f6r t\u00e4vlingen har forskaren f\u00f6rberett ett fungerande exploiteringsverktyg f\u00f6r Google kernelCTF. I beskrivningen av exploateringen<\/a> visas hur felet blir en 8-byte-inmatning i den frigjorda strukturen, vilket leder till en k\u00e4rnminnesl\u00e4cka via \/proc\/self\/fdinfo, f\u00e5ngst av file->f_op->poll och en ROP-kedja f\u00f6r att f\u00e5 root. F\u00f6r m\u00e5let lts-6.12.67 anges en tillf\u00f6rlitlighet p\u00e5 omkring 99%, f\u00f6r COS \u2014 cirka 98%; Android-exploit, enligt f\u00f6rfattaren, \u00e4r fortfarande under arbete.<\/p>\n

<\/noindex> <\/p>\n

Utsatta \u00e4r k\u00e4rnor baserade p\u00e5 grenen 6.4 och nyare<\/strong>, om de inte har f\u00e5tt patchen. Gamla Android-enheter med k\u00e4rnor 6.1, inklusive Pixel 8 och liknande modeller, anser f\u00f6rfattaren vara os\u00e5rbara<\/a>. Anv\u00e4ndare och administrat\u00f6rer har endast ett rimligt alternativ f\u00f6r skydd \u2014 att installera k\u00e4rnuppdateringen fr\u00e5n sin distribution eller enhetstillverkare.<\/p>\n

<\/noindex><\/p>\n

K\u00e4lla: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Bad Epoll, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2026-46242. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e root. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0414\u0436\u044d\u0451\u043d\u0430 \u0427\u043e\u043d\u0430, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e Linux-\u0434\u0435\u0441\u043a\u0442\u043e\u043f\u044b \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0438 \u0447\u0430\u0441\u0442\u044c Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 \u2014 \u044d\u0442\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 Bad Epoll. \u041e\u0448\u0438\u0431\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182539","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bad Epoll: en s\u00e5rbarhet f\u00f6r att f\u00e5 root-\u00e5tkomst har uppt\u00e4ckts i Linux och Android | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Bad Epoll: \u0432 Linux \u0438 Android \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-08T08:54:16+00:00","article:modified_time":"2026-07-08T08:54:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182539","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:07","updated":"2026-08-05 12:22:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/182539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=182539"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/182539\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=182539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=182539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=182539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}