Hi Christian, > In kernels prior to 4.14.8 (missing commit cef31d9af908) > the sigevent.sigev_notify field is not properly checked > when creating a timer using timer_create(2). > This can be used to read arbitrary kernel memory. Thanks for your patch, merged into master (with Cyril's and Li's ack). Kind regards, Petr