Priority-inheritance futexes were found to have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel.