CVE-2024-26737

CVE-2024-26737 refers to a race in the Linux kernel’s BPF timers where a race between bpf_timer_cancel_and_free and bpf_timer_cancel could produce a use-after-free of timer->timer. The fix adds freeing of timer->timer after an RC U grace period and introduces an rcu_head in struct bpf_hrtim...