Threats tagged 'ghsa-pr95-77xq-3v99'

CVE-2026-98260 is a high-severity vulnerability in the Linux kernel involving improper cleanup of POSIX timers after a non-leader thread executes a new program image (exec). The flaw arises because POSIX timers remain queued on a thread after its PID ownership changes during exec, leading to use-after-free conditions if certain failures occur before cleanup. This can cause memory corruption and potentially allow an attacker with local privileges to impact confidentiality, integrity, and availability.