Re: CVE-2026-64560

--n7sejYSAq7z3m8cE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi!

> this looks like it does not need special drivers and is not that easy
> to mitigate (CONFIG_POSIX_TIMERS=3Dn...):
>=20
> https://git.kernel.org/pub/scm/linux/security/vulns.git/commit/?id=3D081d=
2ff9592751aa400828237f17c108e4e1f513
>=20
> Early releases?

No cool name, no logo, and no website? Aint doing no release for that!

So... this is crasher, and you need local access for it. In my eyes,
it is below "Dirty Cow" in severity.

https://lwn.net/Articles/1086226/

But this is 6.12.100. Something tells me 6.12.99 and .98 are fixing
similar issues. So... I guess we should investigate some more.

Best regards,
								Pavel


--n7sejYSAq7z3m8cE
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQRPfPO7r0eAhk010v0w5/Bqldv68gUCamu9eQAKCRAw5/Bqldv6
8sjMAKCW92hyUpSApRF2e1tpmZzj7xIFbQCgmTAPMMgqxDnvOqBLXBu2cJVZCPI=
=zCjf
-----END PGP SIGNATURE-----

--n7sejYSAq7z3m8cE--