[GIT PULL] timer subsystem fixes

[Ingo Molnar <mingo@kernel.org>]

Linus,

Please pull the latest timers/urgent Git tree from:

   git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git timers-urgent-2026-09-20

for you to fetch changes up to c21eaa72f02fc6e85621cbe09d303d8fb8bd39cd:

Timer race fixes:

 - Fix timer signal <-> exec() race, to prevent UAF (Thomas Gleixner)

 - Clean up POSIX CPU timers right after de_thread(), to prevent UAF
   (Hyunwoo Kim)

 - Fix POSIX CPU timers race between expiry and timer_settime(),
   to prevent UAF (Thomas Gleixner)

 Thanks,

	Ingo

------------------>
Hyunwoo Kim (1):
      exec: Cleanup POSIX timers right after de_thread()

Thomas Gleixner (2):
      signal: Prevent exec() race
      posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list


 fs/exec.c                      |  29 ++++++++---
 kernel/exit.c                  |  11 ++--
 kernel/signal.c                | 115 ++++++++++++++++++++++++++++++-----------
 kernel/time/posix-cpu-timers.c |  40 +++++++-------
 4 files changed, 134 insertions(+), 61 deletions(-)