Use-After-Free Vulnerability in Linux Kernel Affecting Timer Management

CVE-2026-64560

What is CVE-2026-64560?

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically, if a timer was armed and enqueued, subsequent operations can trigger undefined behavior as they attempt to access the memory of the deleted object. The flaw exists due to weak memory ordering guarantees on certain architectures, allowing for potential exploitation. To mitigate this, improvements involve enhanced memory visibility and better task management routines, ensuring safe execution during timer operations.

References