Skip to content
futex: remove_waiter stack uaf
guysrd.github.io | blog | #vulnerability-research | #privilege-escalation | #use-after-free | #linux-kernel | #futex
Summary
A stack use-after-free in the Linux futex remove_waiter(), present since 2011, fixed in April 2026, leaves a waiter's pi_blocked_on dangling; the author triggered it but did not reach code execution.
- Published
- Collected