CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Description
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-26 · CAPEC-29
CVEs mapped to this weakness (2,607)
page 42 of 131| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-48689 | Hig | 0.46 | 7.0 | 0.00 | May 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report [1] showing a possible misuse of pfmemalloc page status in TCP zerocopy paths. Indeed, for pages coming from user space or… | ||
| CVE-2024-26960 | Hig | 0.46 | 7.0 | 0.00 | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a theoretical window where swapoff() could run and teardown a swap_info_struct while a call to free_swap_and_cache() was… | ||
| CVE-2024-26243 | Hig | 0.46 | 7.0 | 0.00 | Apr 9, 2024 | Windows USB Print Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-26242 | Hig | 0.46 | 7.0 | 0.00 | Apr 9, 2024 | Windows Telephony Server Elevation of Privilege Vulnerability | ||
| CVE-2024-26236 | Hig | 0.46 | 7.0 | 0.00 | Apr 9, 2024 | Windows Update Stack Elevation of Privilege Vulnerability | ||
| CVE-2023-42974 | Hig | 0.46 | 7.0 | 0.00 | Mar 28, 2024 | A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to execute arbitrary code with kernel privileges. | ||
| CVE-2024-21445 | Hig | 0.46 | 7.0 | 0.01 | Mar 12, 2024 | Windows USB Print Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-21439 | Hig | 0.46 | 7.0 | 0.01 | Mar 12, 2024 | Windows Telephony Server Elevation of Privilege Vulnerability | ||
| CVE-2023-52578 | Hig | 0.46 | 7.0 | 0.00 | Mar 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEV_STATS_INC() to update… | ||
| CVE-2024-0041 | Hig | 0.46 | 7.0 | 0.00 | Feb 16, 2024 | In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local escalation of privilege that fails to remove the persistent dot with no additional execution privileges needed. User… | ||
| CVE-2023-6531 | Hig | 0.46 | 7.0 | 0.00 | Jan 21, 2024 | A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on. | ||
| CVE-2023-42832 | Hig | 0.46 | 7.0 | 0.00 | Jan 10, 2024 | A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to gain root privileges. | ||
| CVE-2023-6546 | Hig | 0.46 | 7.0 | 0.01 | Dec 21, 2023 | A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci… | ||
| CVE-2023-36405 | Hig | 0.46 | 7.0 | 0.00 | Nov 14, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-41914 | Hig | 0.46 | 7.0 | 0.00 | Nov 3, 2023 | SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files. | ||
| CVE-2023-3397 | Hig | 0.46 | 7.0 | 0.00 | Nov 1, 2023 | A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information. | ||
| CVE-2023-38159 | Hig | 0.46 | 7.0 | 0.06 | Oct 10, 2023 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2023-36902 | Hig | 0.46 | 7.0 | 0.01 | Oct 10, 2023 | Windows Runtime Remote Code Execution Vulnerability | ||
| CVE-2023-36776 | Hig | 0.46 | 7.0 | 0.02 | Oct 10, 2023 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2023-38616 | Hig | 0.46 | 7.0 | 0.00 | Sep 6, 2023 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. |
- risk 0.46cvss 7.0epss 0.00
In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report [1] showing a possible misuse of pfmemalloc page status in TCP zerocopy paths. Indeed, for pages coming from user space or…
- risk 0.46cvss 7.0epss 0.00
In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a theoretical window where swapoff() could run and teardown a swap_info_struct while a call to free_swap_and_cache() was…
- risk 0.46cvss 7.0epss 0.00
Windows USB Print Driver Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
Windows Telephony Server Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
Windows Update Stack Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to execute arbitrary code with kernel privileges.
- risk 0.46cvss 7.0epss 0.01
Windows USB Print Driver Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Telephony Server Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEV_STATS_INC() to update…
- risk 0.46cvss 7.0epss 0.00
In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local escalation of privilege that fails to remove the persistent dot with no additional execution privileges needed. User…
- risk 0.46cvss 7.0epss 0.00
A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.
- risk 0.46cvss 7.0epss 0.00
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to gain root privileges.
- risk 0.46cvss 7.0epss 0.01
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci…
- risk 0.46cvss 7.0epss 0.00
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.
- risk 0.46cvss 7.0epss 0.00
A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information.
- risk 0.46cvss 7.0epss 0.06
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Runtime Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.02
Win32k Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.