# CCT 361: Bad Epoll - Root Access in 6 Instructions

Page: https://stenobird.com/podcast/cissp-cyber-training-podcast-cissp-training-program-6068495/cct-361-bad-epoll-root-access-in-6-instructions
Text version: https://stenobird.com/podcast/cissp-cyber-training-podcast-cissp-training-program-6068495/cct-361-bad-epoll-root-access-in-6-instructions.md
Podcast: [CISSP Cyber Training Podcast - CISSP Training Program](https://stenobird.com/podcast/cissp-cyber-training-podcast-cissp-training-program-6068495)
Published: 2026-07-13T11:00:00+00:00
Episode link: https://www.buzzsprout.com/2167626/episodes/19484470-cct-361-bad-epoll-root-access-in-6-instructions.mp3
Audio file: https://www.buzzsprout.com/2167626/episodes/19484470-cct-361-bad-epoll-root-access-in-6-instructions.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/cissp-cyber-training-podcast-cissp-training-program-6068495/episodes/cct-361-bad-epoll-root-access-in-6-instructions
Duration seconds: 1940

## Resource

Send us Fan Mail A six-instruction timing glitch in the Linux kernel can be the difference between “low-priv user” and full root control, and that is why we dig into the Bad EPoll vulnerability from a CISSP-ready, manager-first angle. We start by grounding what the Linux kernel EPoll subsystem does, why it is foundational to high-performance I/O, and why “just disable it” is not a real option when you’re dealing with production Linux servers, desktops, cloud workloads, and Android devices. T...

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/cissp-cyber-training-podcast-cissp-training-program-6068495/episodes/cct-361-bad-epoll-root-access-in-6-instructions/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/cissp-cyber-training-podcast-cissp-training-program-6068495/cct-361-bad-epoll-root-access-in-6-instructions.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.