CVE-2026-46331 pedit COW act_pedit tc Action Page Cache Exploit

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•0

Detects execution of Linux Traffic Control (tc) commands, module loading, or specific strings related to the exploitation of CVE-2026-46331, involving the act_pedit kernel component. These activities are associated with a potential kernel-level copy-on-write (COW) page cache corruption vulnerability that could be used for privilege escalation.