CVE-2026-46331 pedit COW act_pedit Exploit Execution on Linux

Ibrahim Saud@tektrix

•updated Jun 26, 2026•0•0•2

Detects execution of exploit binaries associated with CVE-2026-46331 (pedit COW) or the abuse of legitimate 'tc' (traffic control) and 'unshare' utilities to perform page cache corruption and privilege escalation in user namespace contexts.