Linux Advisory Timer Vulnerabilities Leading to Use-After-Free Issues

A proposed Linux repair addresses two timer bugs that can trigger use-after-free conditions while one program replaces itself with another through exec(). Both failures begin with the same unusual transition: a thread that is not the process leader becomes the new leader, and Linux exchanges thread identifiers while timer and signal state still reflects the old ownership layout.LinuxSecurity – Security ArticlesRead More