SECUFOCUSNOW
Home›CVE index›CVE-2026-64560
Review reviewHigh

CVE-2026-64560

Linux

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF: sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand);...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.30
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF: sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand);...

Affected product and versions

Product
Linux
Affected versions
>= 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 < 67aa823e3e8c229c6d374df79c804f6721cb83b6, >= 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 < d8bcb28abad857f1415da7656f19b2ada90af04f, >= 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 < cc35ddbc497311e0b6b9a6a6a4f4d1217d6ab1aa, >= 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 < 12a891c773aeb5823d63dbd0cb2ab931d6c21c9b, >= 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 < e74443f5db0037c556ef436fa64b88bf4ea08f83, >= 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 < 6a7ecc25abe6f0fecc6e62a05096987200edbd02, >= 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 < ad1cafa1bdaa71da85d71cac053838bbe97852b6, >= 55e8c8eb2c7b6bf30e99423ccfe7ca032f498f59 < 920f893f735e92ba3a1cd9256899a186b161928d, >= 5.7
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available