Files
Centos-kernel-stream-9/kernel
CKI KWF Bot ff6a06e667 Merge: CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec() race
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/8619

JIRA: https://redhat.atlassian.net/browse/RHEL-227838
CVE: CVE-2026-64560
CVE: CVE-2026-64370
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/8619

By incorporating a number of posix-timers patches from the series in
merge commit 9a7b0158aea7 ("Merge tag 'posix-timers-2024-07-29' of
git://git.kernel.org/pub/scm/linux/kernel/git/frederic/linux-dynticks
into timers/core") and a few extra ones, the merge conflicts with
the posix_cpu_timer_set() and posix_cpu_timer_rearm() functions can be
eliminated. However, merge conflicts still exist for posix_cpu_timer_del()
and kernel/exit.c as resolving them will require pulling in a lot
more patches.

This MR also includes another minor CVE-2026-64370 fix in the same
posix timers code base.

Signed-off-by: Waiman Long <longman@redhat.com>

Approved-by: Tony Camuso <tcamuso@redhat.com>
Approved-by: Ricardo Robaina <rrobaina@redhat.com>
Approved-by: Rafael Aquini <raquini@redhat.com>
Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>

Merged-by: CKI GitLab Kmaint Pipeline Bot <26919896-cki-kmaint-pipeline-bot@users.noreply.gitlab.com>
2026-08-18 21:59:43 +00:00
..
2025-08-22 14:40:40 -04:00
2025-12-08 12:31:32 +08:00
2025-12-22 09:16:59 +01:00
2025-08-22 14:40:57 -04:00