[GIT PULL] timer subsystem fixes
From: Ingo Molnar
Date: Sun Sep 20 2026 - 05:55:08 EST
Linus,
Please pull the latest timers/urgent Git tree from:
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git timers-urgent-2026-09-20
for you to fetch changes up to c21eaa72f02fc6e85621cbe09d303d8fb8bd39cd:
Timer race fixes:
- Fix timer signal <-> exec() race, to prevent UAF (Thomas Gleixner)
- Clean up POSIX CPU timers right after de_thread(), to prevent UAF
(Hyunwoo Kim)
- Fix POSIX CPU timers race between expiry and timer_settime(),
to prevent UAF (Thomas Gleixner)
Thanks,
Ingo
------------------>
Hyunwoo Kim (1):
exec: Cleanup POSIX timers right after de_thread()
Thomas Gleixner (2):
signal: Prevent exec() race
posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
fs/exec.c | 29 ++++++++---
kernel/exit.c | 11 ++--
kernel/signal.c | 115 ++++++++++++++++++++++++++++++-----------
kernel/time/posix-cpu-timers.c | 40 +++++++-------
4 files changed, 134 insertions(+), 61 deletions(-)