CVE Database›Document archive›CVE-2026-64560

CVE-2026-64560

kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race

Loading…

Severity

Important

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · July 29, 2026

Updated · September 9, 2026

Description

A flaw was found in the Linux kernel's CPU timer functionality. A race condition, which is a timing issue between different operations, can occur when a process attempts to delete a timer while another operation is still trying to access it. This can lead to a Use-After-Free (UAF) vulnerability, where the system tries to use memory that has already been released. Such a vulnerability could potentially be exploited by a local attacker to cause system instability or lead to a denial of service.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-364 · Signal Handler Race Condition