The Linux kernel received a small but important patch that closes CVE-2025-68214 — a race in timer_shutdown_sync that could clear a timer’s function pointer while that timer was still active on another CPU, leaving a pending timer with a NULL callback and triggering a WARN_ON inside...