New Linux Private Futex Race Can Trigger Kernel Use-After-Free

A proposed Linux kernel patch addresses a private-futex race that a recent security fix left unresolved. Security researcher Hyunwoo Kim found that a rare sequence involving nested vfork() calls can allow two tasks sharing the same memory to run concurrently and reach private futex hash initialization at nearly the same time.LinuxSecurity – Security ArticlesRead More