From 47aab8498bc2d5f26cb4f1064c6fb1ab6f5a8a83 Mon Sep 17 00:00:00 2001
From: HackTricks News Bot <bot@hacktricks.xyz>
Date: Tue, 9 Sep 2025 12:57:08 +0000
Subject: [PATCH] =?UTF-8?q?Add=20linpeas=20privilege=20escalation=20checks?=
 =?UTF-8?q?=20from:=20Race=20Against=20Time=20in=20the=20Kernel=E2=80=99s?=
 =?UTF-8?q?=20Clockwork?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../18_CVE_2025_38352_posix_cpu_timers.sh     | 26 +++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 linPEAS/builder/linpeas_parts/1_system_information/18_CVE_2025_38352_posix_cpu_timers.sh

diff --git a/linPEAS/builder/linpeas_parts/1_system_information/18_CVE_2025_38352_posix_cpu_timers.sh b/linPEAS/builder/linpeas_parts/1_system_information/18_CVE_2025_38352_posix_cpu_timers.sh
new file mode 100644
index 0000000..22a6176
--- /dev/null
+++ b/linPEAS/builder/linpeas_parts/1_system_information/18_CVE_2025_38352_posix_cpu_timers.sh
@@ -0,0 +1,26 @@
+# Title: System - CVE-2025-38352 POSIX CPU timers
+# ID: SY_CVE_2025_38352_posix_cpu_timers
+# Author: HT Bot
+# Last Update: 09-09-2025
+# Description: Quick checks related to potential exposure to CVE-2025-38352 (POSIX CPU timers).
+# License: GNU GPL
+# Version: 1.0
+# Functions Used: print_2title, print_list, echo_no
+# Global Variables:
+# Initial Functions:
+# Generated Global Variables:
+# Fat linpeas: 0
+# Small linpeas: 1
+
+print_2title "CVE-2025-38352 - POSIX CPU timers"
+
+print_list "Kernel version ................ "$NC
+(uname -r 2>/dev/null || echo_no) | head -n 1
+
+print_list "Kernel build info ............. "$NC
+(uname -v 2>/dev/null || echo_no) | head -n 1
+
+print_list "POSIX timers (hint) ........... "$NC
+( (grep -qi posix /proc/timer_list 2>/dev/null && echo "present") || echo_no )
+
+echo ""