[GIT PULL] timer subsystem fixes

From: Ingo Molnar

Date: Sun Sep 20 2026 - 05:55:08 EST


Linus,

Please pull the latest timers/urgent Git tree from:

git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git timers-urgent-2026-09-20

for you to fetch changes up to c21eaa72f02fc6e85621cbe09d303d8fb8bd39cd:

Timer race fixes:

- Fix timer signal <-> exec() race, to prevent UAF (Thomas Gleixner)

- Clean up POSIX CPU timers right after de_thread(), to prevent UAF
(Hyunwoo Kim)

- Fix POSIX CPU timers race between expiry and timer_settime(),
to prevent UAF (Thomas Gleixner)

Thanks,

Ingo

------------------>
Hyunwoo Kim (1):
exec: Cleanup POSIX timers right after de_thread()

Thomas Gleixner (2):
signal: Prevent exec() race
posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list


fs/exec.c | 29 ++++++++---
kernel/exit.c | 11 ++--
kernel/signal.c | 115 ++++++++++++++++++++++++++++++-----------
kernel/time/posix-cpu-timers.c | 40 +++++++-------
4 files changed, 134 insertions(+), 61 deletions(-)