179 matches found
CVE-2026-64560-Analysis
CVE-2026-64560 — Linux Kernel posix-cpu-timers non-leader exec 경쟁 조건 UAF Reproducer / PoC트리거 검증형 : Linux & Android NDK 본 저장소는 자체 테스트 기기 에서 패치 상태를 검증하고 연구/학습 목적으로만 제공되며, 권한 상승/익스플로잇 프리미티브를 포함하지 않습니다. 1. 취약점 개요 필드| 내용 ---|--- CVE ID| CVE-2026-64560 제목| posix-cpu-timers: Prevent UAF caused by...
Exploit for CVE-2026-64560
Redmi 14C “pond” – CVE-2026-64560 Migration Kit Global Rele...
Rocky Linux 10.0 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc (crlsa-2025_15662)
The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202515662 advisory. kernel: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 Tenable has extracted the preceding description block direct...
Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2025_15471)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202515471 advisory. kernel: bpf: Don't use tnumrange on array range checking for poke descriptors CVE-2022-49985 kernel: posix-cpu-timers: fix race between handleposixcputime...
cve-2026-64560-a16
CVE-2026-64560 — ツールチェーン + マルチターゲット移植 CVE-2026-64560 は Linux カーネル posix-cpu-timers の use-after-free （ローカル非特権レース、CVSS 3.1 = 7.8；6.6.118 では未修正、6.6.147 でようやく修正）。 このリポジトリには二つの目的がある：上流では Python スクリプト群でしか駆動できなかったツールチェーンを単一の静的 Go バイナリ にすること、 そして上流にはない realme RMX5010（A16 / SM8750） ターゲットを補うこと。 !WARNING...
Exploit for CVE-2026-64560
CVE-2026-64560 – Toolchain + Multi-target Porting CVE-2026-64...
CVE-2026-90305: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ARM: 9483/1: select HAVEPOSIXCPUTIMERSTASKWORK Commit c6e61c06d606 "ARM: 9463/1: Allow to enable RT" enabled PREEMPTRT on ARM but did not select HAVEPOSIXCPUTIMERSTASKWORK. This leaves CONFIGPOSIXCPUTIMERSTASKWORK disabled, so CP...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Clean up CPU timers before freeing them during exec. The commit 55e8c8eb2c7b “posix-cpu-timers: Store a reference to a pid instead of a task” introduced a mechanism to retrieve tasks by PID when deleting a CPU...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Fixed the rlimit settings for posix cpu timers. posix cpu timers require an additional step beyond simply setting rlimit. The code should be refactored so it’s clear which code is setting the limits, and the posix cp...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel
CVE-2025-38352: Linux Kernel POSIX CPU Timer TOCTOU Race Condi...
kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race
A flaw was found in the Linux kernel's CPU timer functionality. A race condition, which is a timing issue between different operations, can occur when a process attempts to delete a timer while another operation is still trying to access it. This can lead to a Use-After-Free UAF vulnerability,...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: This issue prevents UAF Use-after-Allocation Fault caused by a race condition involving non-leader exec. Wongi and Jungwoo identified and reported a race condition related to exec, which can lead to UAF. The...
SUSE CVE-2026-72068
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On 32-bit kernels both rlimnew unsigned long and NSECPERSEC 1000000000L...
Exploit for CVE-2026-64560
GhostLock CVE-2026-64560 — posix-cpu-timers UAF exploit for Vi...
kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race
A flaw was found in the Linux kernel's CPU timer functionality. A race condition, which is a timing issue between different operations, can occur when a process attempts to delete a timer while another operation is still trying to access it. This can lead to a Use-After-Free UAF vulnerability,...
kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race
A flaw was found in the Linux kernel's CPU timer functionality. A race condition, which is a timing issue between different operations, can occur when a process attempts to delete a timer while another operation is still trying to access it. This can lead to a Use-After-Free UAF vulnerability,...
kernel security, bug fix, and enhancement update
5.14.0-687.41.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
CVE-2026-72068
A flaw was found in the Linux kernel's posix-cpu-timers component on 32-bit systems. An integer truncation vulnerability occurs in the updaterlimitcpu function when converting the RLIMITCPU value to nanoseconds. This issue causes the process CPU timer to be programmed to fire prematurely for...
Linux Distros Unpatched Vulnerability : CVE-2026-72068
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100544)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100544 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...