Out-of-Cancel: A New Linux Kernel Race Condition Bug Class

The article introduces the Out-of-Cancel vulnerability class in the Linux kernel, where workqueue cancellation APIs fail to guarantee object lifetime. This race…