New Pedit COW Linux Kernel Flaw Lets Local Users Gain Root Access

A newly disclosed critical privilege escalation vulnerability in the Linux kernel’s traffic-control subsystem, tracked as CVE-2026-46331 and nicknamed “pedit COW,” allows an unprivileged local user to gain full root access on affected systems. A public, working proof-of-concept exploit named packet_edit_meme appeared on GitHub within 24 hours of CVE assignment on June 16, 2026. The flaw lies in tcf_pedit_act() , the kernel function that rewrites packet…