Exploit for CVE-2026-98260

CVE-2026-98260 — Triggers only a PoC POSIX-CPU-TIMERS UAF...

kernel security, bug fix, and enhancement update

6.12.0-211.67.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

CLSA-2025-1757962453 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 9 : kernel (RHSA-2026:83775)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83775 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: exec: Cleanup POSIX timers right after...

RHEL 9 : kernel (RHSA-2026:83738)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83738 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: exec: Cleanup POSIX timers right after...

RHEL 9 : kernel (RHSA-2026:83797)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83797 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: exec: Cleanup POSIX timers right after...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: posixtimers: Ensure the limit on the timer ID search loop is valid posixtimeradd attempts to allocate a posix timer ID by starting from the cached ID stored after the last successful allocation. This is achieved through a loop th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: posix-timers: A situation where livelock occurs in itimerdelete has been addressed. Itimerdelete includes a retry loop when the timer expires simultaneously. On non-RT kernels, this simply involves waiting until the timer callbac...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.3 - exec: Cleanup POSIX timers right after dethread Hyunwoo Kim Orabug: 40157515 CVE-2026-98260 5.15.0-325.221.6.2 - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - eventpoll: move epifget up Christian Brauner Orabug:...

CVE-2026-98260

In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after dethread A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posixcputimers. The task is looked up...

CVE-2026-98260 exec: Cleanup POSIX timers right after de_thread()

In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after dethread A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posixcputimers. The task is looked up...

CVE-2026-98260

In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after dethread A per-thread CPU timer holds a reference to the PID of the thread it is attached to and, while it is armed, its node is queued in that thread's posixcputimers. The task is looked up...

CVE-2026-98260

The Linux kernel is vulnerable to a use-after-free condition during the execve() system call. The issue occurs when a non-leader thread executes; while de_thread() changes the PID ownership, a per-thread CPU timer node remains queued on the original thread's posix_cputimers. If subsequent operati...

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

...

SUSE CVE-2026-64560

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec race Wongi and Jungwoo decoded and reported a non-leader exec related race which can result in an UAF: systimerdelete exec posixcputimerdel // Observes old leader p =...

Linux kernel posix-timers do_timer_create timer subsystem crash

Уязвимость функции dotimercreate модуля kernel/time/posix-timers.c подсистемы таймера ядра операционной системы Linux связана с неправильным освобождением памяти «утечка памяти». Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...