![\"\"](\"https:\/\/www.deepin.org\/wp-content\/uploads\/2026\/07\/108_\u526f\u672c.png\")
<\/p>\nDear deepin Users and Community Members,<\/p>\n
A local privilege escalation vulnerability codenamed ActPedit (also known as pedit COW) has recently been disclosed in the Linux kernel. This vulnerability falls under the same category of page cache write vulnerabilities as the previously disclosed Dirty Frag and Copy Flaws. An attacker with low-privilege local access can exploit this flaw to tamper with the page cache of read-only files, escalate privileges and gain root access.<\/p>\n
Proof-of-Concept (PoC) codes and detailed exploitation techniques for this vulnerability have been released to the public. Given its high severity and broad impact, we strongly recommend all users to update their systems immediately to secure your devices.<\/p>\n
<\/p>\n
CVE ID: CVE-2026-46331<\/p>\n
Codename: ActPedit (pedit COW)<\/p>\n
Description: A local privilege escalation vulnerability exists within the packet editing (pedit) subsystem of Linux kernel traffic control. When handling copy-on-write (COW) operations, the Severity: High (CVSS score: 7.1\u20137.8)<\/p>\n Exploit Requirements:<\/p>\n The kernel is built with The attacker has local permissions to configure traffic control rules.<\/p>\n The risk of exploitation via public PoCs rises sharply if user namespaces are enabled ( Successful exploitation allows a regular local user to obtain full root control over the entire system.<\/p>\n Affected Versions: All deepin 25 systems without the latest security patch are vulnerable. Immediate updates are required.<\/p>\n <\/p>\n deepin 25 (Kernel 6.6 & 6.18)<\/p>\n Patches addressing the ActPedit vulnerability have been fully rolled out for deepin 25.<\/p>\n You may install updates via the Control Center, or run the following command in Terminal:<\/p>\n sudo apt update && sudo apt dist-upgrade<\/em><\/p>\n Reboot your device after upgrading to activate the security fix.<\/p>\n <\/p>\n<\/div>\n Additional updates: Resolved known issues for DDE desktop environment.<\/p>\n These are all updates included in the official deepin 25.1.1 release. We would like to thank every member of the deepin community for your continuous support!<\/p>\n If you encounter any issues during updating or daily usage, please visit the deepin Community Forum to share your feedback.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":" Dear deepin Users and Community Members, A local privilege escalation vulnerability codenamed ActPedit (also known as pedit COW) has recently been disclosed in the Linux kernel. This vulnerability falls under the same category of page cache write vulnerabilities as the previously disclosed Dirty Frag and Copy Flaws. An attacker with low-privilege local access can exploit this flaw to tamper with the page cache of read-only files, escalate privileges and gain root access. Proof-of-Concept (PoC) codes and detailed exploitation techniques for this vulnerability have been released to the public. Given its high severity and broad impact, we strongly recommend all users ...Read more<\/a><\/p>\n","protected":false},"author":18825,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[75,93],"tags":[],"_links":{"self":[{"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/posts\/39364"}],"collection":[{"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/users\/18825"}],"replies":[{"embeddable":true,"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/comments?post=39364"}],"version-history":[{"count":7,"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/posts\/39364\/revisions"}],"predecessor-version":[{"id":39374,"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/posts\/39364\/revisions\/39374"}],"wp:attachment":[{"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/media?parent=39364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/categories?post=39364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.deepin.org\/en\/wp-json\/wp\/v2\/tags?post=39364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}tcf_pedit_act()<\/code> function fails to account for runtime header offsets when calculating the write range for skb_ensure_writable()<\/code>. This causes incomplete COW protection for certain write regions, leading to out-of-bounds writes and page cache corruption. Local attackers authorized to configure traffic control rules can exploit this flaw to elevate privileges or crash the system.<\/p>\nCONFIG_NET_ACT_PEDIT<\/code> enabled;<\/p>\nCONFIG_USER_NS=y<\/code> and \/proc\/sys\/kernel\/unprivileged_userns_clone = 1<\/code>).<\/p>\nPatch Deployment Status<\/strong><\/h1>\n