futex security

The Linux kernel fix for CVE-2025-40341 closes a narrow but meaningful race that could allow a local actor to read another process’s futex robust_list pointer across an exec boundary — a disclosure primitive that, while not a direct remote root exploit, reduces the kernel’s post-exec isolation...