Exploit for CVE-2026-98260

CVE-2026-98260 — Analysis of temporary root access and vendor...

CVE-2026-64560-Analysis

CVE-2026-64560 — Linux Kernel posix-cpu-timers non-leader exec race UAF Reproducer / PoC trigger verification : Linux & Android NDK This repository is intended solely for verifying patch status and for research/learning on your own test devices. It does not contain any privilege...

cve-2026-64560-a16

CVE-2026-64560 — Toolchain + Multi-Target Port CVE-2026-64560 is a use-after-free in the Linux kernel posix-cpu-timers local unprivileged race, CVSS 3.1 = 7.8; unfixed in 6.6.118, fixed only in 6.6.147. This repository does two things: it turns the upstream toolchain, which can only be driven by ...

Exploit for CVE-2026-98260

CVE-2026-98260 — posix-cpu-timers UAF after a failed exec Eng...

Exploit for CVE-2026-64560

RootKit · Jailbreak Assistant Flutter + Shizuku ⚠️ Rea...

CLSA-2025-1757961506 kernel: Fix of 28 CVEs

posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - xfrm: state: fix out-of-bounds read during lookup CVE-2024-57982 - nfsd: fix race between laundromat and freestateid CVE-2024-50106 - nfsd: split scstatus out of sctype CVE-2024-50106 - nfsd: avoid race...

CLSA-2025-1757961864 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

Exploit for CVE-2026-64560

CVE-2026-64560 — realme RMX6699 Android 17 / COOS17 !andr...

Exploit for CVE-2026-64560

OPPO Find X10 Pro Max PMX110 / OP659FL1 · CVE-2026-64560 Res...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds using u64 nsecs = rlimnew NSECPERSEC; On 32-bit kernels, both rlimnew an unsigned long and NSECPERSEC...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b “posix-cpu-timers: Store a reference to a pid not a task” began checking for tasks by PID when deleting a CPU timer. When a non-leader threa...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: AppArmor: fix rlimit for POSIX CPU timers POSIX CPU timers require an additional step beyond just setting the rlimit. Refactor the code so it becomes clear which code is setting the limit, and conditionally update the POSIX CPU...

CVE-2026-90305

A flaw was found in the Linux kernel, specifically affecting ARM architectures with PREEMPTRT enabled. A local attacker can trigger a Denial of Service DoS by utilizing CPU timers, such as through setrlimit or setitimer. This occurs because the kernel attempts to acquire a sleeping lock...

SUSE CVE-2026-98258

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cputimer::firing from a tristate value to a boolean. This lost the...

Linux Distros Unpatched Vulnerability : CVE-2026-98258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 convert...

CVE-2026-98258

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cputimer::firing from a tristate value to a boolean. This lost the...

DEBIAN-CVE-2026-98258

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cputimer::firing from a tristate value to a boolean. This lost the...

UBUNTU-CVE-2026-98258

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cputimer::firing from a tristate value to a boolean. This lost the...

CVE-2026-98258

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cputimer::firing from a tristate value to a boolean. This lost the...

CVE-2026-98258

A race condition exists in the Linux kernel within the posix-cpu-timers component. The issue stems from a previous commit that converted cpu_timer::firing from a tristate value to a boolean, causing a loss of distinction between timers not owned by the firing list and those where delivery was can...