Skip to content

Fix: posix cpu timer use-after-free

Wander Lairson Costa requested to merge walac/centos-stream-9:bz2114874-posix-cpu-timers into main

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2116968

CVE: CVE-2022-2585

Signed-off-by: Wander Lairson Costa wander@redhat.com

c0a6d587 (Wander Lairson Costa) posix-cpu-timers: Cleanup CPU timers before freeing them during exec

f68b7964 (Wander Lairson Costa) fix race between exit_itimers() and /proc/pid/timers

fs/exec.c | 5 ++++- include/linux/sched/task.h | 2 +- kernel/exit.c | 2 +- kernel/time/posix-timers.c | 19 ++++++++++++++----- 4 files changed, 20 insertions(+), 8 deletions(-)

Edited by Wander Lairson Costa

Merge request reports