CVE Database›Document archive›CVE-2025-68247

CVE-2025-68247

kernel: posix-timers: Plug potential memory leak in do_timer_create()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · December 16, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

posix-timers: Plug potential memory leak in do_timer_create()

When posix timer creation is set to allocate a given timer ID and the access to the user space value faults, the function terminates without freeing the already allocated posix timer structure.

Move the allocation after the user space access to cure that.

[ tglx: Massaged change log ]

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified