A new LPE on the Linux Kernel has been released, affecting versions 6.4+ of the kernel. Some distros may be vulnerable if they backport though.
There is no mitigation, only patching. There is an existing PoC but for google’s KernelCTF.
Original writeup: security-research/pocs/linux/kernelctf/CVE-2026-46242_lts_cos/docs/exploit.md at submit-cve-2026-46242 · J-jaeyoung/security-research · GitHub
More Information: GitHub - J-jaeyoung/bad-epoll · GitHub and Bad Epoll: The bug missed by Mythos | CompSec
PoC for a specific kernel image: security-research/pocs/linux/kernelctf/CVE-2026-46242_lts_cos/exploit/lts-6.12.67/exploit.cpp at submit-cve-2026-46242 · J-jaeyoung/security-research · GitHub