Details
- Type
- Use-After-Free
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published
- 6 October 2026
- Updated
- 15 October 2026
CVE-2026-98258 Linux Kernel - Use-After-Free
Linux kernel contains a use-after-free vulnerability in POSIX CPU timers caused by improper handling of timer firing state during expiry list operations, letting attackers cause memory corruption, exploit requires triggering timer expiry and deletion race conditions.
CVSS base score
7.8
/10
High- CISA KEV
- Not listed
- Public exploit
- None known
- Authentication
- Required
- EPSS
- 0.14% chance of exploitation in 30 days