CVE-2022-2585 It was discovered that when exec'ing from a non-leader thread armed POSIX CPU timers would be left on a list but freed leading to a use-after

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressing POSIX CPU Timer Vulnerabilities Published Two vulnerabilities related to POSIX CPU timers have been published, affecting systems that utilize these timers. CVE-2022-2585, published on January 8, 2024, involves a use-after-free issue when executing from a non-leader thread. CVE-2025-38352, published on July 22, 2025, addresses a race condition between timer handling functions. 2 sources 39

Extracted Entities

CVEs (1)