DEBIAN-CVE-2026-98256

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...

CVE-2026-98256

A use-after-free (UAF) vulnerability exists in the Linux kernel signal handling logic. The issue occurs during a non-leader exec() call where a SIGEV_THREAD_ID timer's struct pid points to a thread that has already called execve(). Due to a non-atomic list_del_init() operation, a signal queue ent...

CVE-2026-98256 signal: Prevent exec() race

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...