Summary
A race condition in the Linux kernel’s POSIX CPU timers may allow a local, unprivileged attacker to trigger a privilege escalation. The flaw arises from improper synchronization when a process exits while CPU timers are being deleted. By exploiting this timing gap, an attacker can gain elevated privileges. The vulnerability impacts kernel versions where POSIX CPU timer handling lacks sufficient locking.
Products Potentially Affected
|
OS/Product
|
Exposure
|
|
ExtremeCloud IQ - Site Engine (XIQ-SE)
|
Yes
|
Repair Recommendations
ExtremeCloud IQ - Site Engine (XIQ-SE):
- Fixed in 25.08.12 or later.
Please see the full Security Advisory article here for more details and future updates.
