pentestPromedium

Pedit COW – Linux Kernel Local Privilege Escalation (CVE-2026-46331)

hackviser

Task: Linux kernel LPE via CVE-2026-46331 — act_pedit partial copy-on-write bug in net/sched allows page cache corruption. Solution: exploit pedit COW to overwrite /bin/su ELF entry point in page cache with setuid shellcode, then exec su for root shell.

linux privilege_escalation shellcode debian copy_on_write kernel sendfile page_cache tc_pedit act_pedit cve_2026_46331 setuid elf_corruption user_namespace netlink

cve_2026_46331_pedit_cow_page_cache_corruptionunprivileged_user_namespace_cap_net_adminpage_cache_poisoning_via_sendfilesetuid_binary_elf_entry_overwriteshellcode_injection_setuid_execve

$ ls tags/ techniques/

linux privilege_escalation shellcode debian copy_on_write kernel sendfile page_cache tc_pedit act_pedit cve_2026_46331 setuid elf_corruption user_namespace netlink

cve_2026_46331_pedit_cow_page_cache_corruptionunprivileged_user_namespace_cap_net_adminpage_cache_poisoning_via_sendfilesetuid_binary_elf_entry_overwriteshellcode_injection_setuid_execve

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

$sign in

$ cat writeup.md…

Sign in to access full writeups

Sign in to access full writeups

Similar writeups