CVE-2025-68247
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/12/2025
Last modified:
16/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
posix-timers: Plug potential memory leak in do_timer_create()<br />
<br />
When posix timer creation is set to allocate a given timer ID and the<br />
access to the user space value faults, the function terminates without<br />
freeing the already allocated posix timer structure.<br />
<br />
Move the allocation after the user space access to cure that.<br />
<br />
[ tglx: Massaged change log ]