Racing Cats to the Exit: A Boring Linux Kernel Use-After-Free

Since 2013, a race condition leading to a use-after-free has existed across all
major Linux distributions between the process exit logic and reading from
/proc//timers. It turns out to be non-exploitable, but this article
explains the race and walks through the process of exploitability analysis.