CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- oracle goldengateVulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected...5.8 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...6.1 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: cancel pending_rx_work before taking conn->lock8.8 High
- linux, linux kernel +1 morenetfilter: ipset: fix race between dump and ip_set_list resize7.8 High
- linux, linux kernel +1 morenetfs: Fix potential for tearing in ->remote_i_size and ->zero_point9.8 Critical
- linux, linux kernel +1 moresmb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()9.8 Critical
- linux, linux kernel +1 morerbd: eliminate a race in lock_dwork draining on unmap7.8 High
- linux, linux kernel +1 moredrm/virtio: use uninterruptible resv lock for plane updates7.8 High
- linux, linux kernel +1 morenetfilter: ebtables: move to two-stage removal scheme7.8 High
- linux, linux kernel +1 morenetfilter: bridge: eb_tables: close module init race7.8 High
- linux, linux kernel +1 moreovpn: fix race between deleting interface and adding new peer4.7 Medium
- linux, linux kernel +1 morehwmon: (lm90) Stop work before releasing hwmon device4.7 Medium
- linux, linux kernel +1 moreerofs: fix managed cache race for unaligned extents7.8 High
- linux, linux kernel +1 moreALSA: seq: Serialize UMP output teardown with event_input7.8 High
- linux, linux kernel +1 morenet: shaper: rework the VALID marking (again)7.8 High
- linux, linux kernel +1 morerxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg7.8 High
- linux, linux kernel +1 morebpf, skmsg: fix verdict sk_data_ready racing with ktls rx9.8 Critical
- linux, linux kernel +1 moretcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction9.4 Critical
- linux, linux kernel +1 moresecurity/keys: fix missed RCU read section on lookup7.8 High
- linux, linux kernel +1 morenfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()8.8 High
- linux, linux kernel +1 morenet/iucv: fix locking in .getsockopt7.8 High
- linux, linux kernel +1 morenet/handshake: Use spin_lock_bh for hn_lock7.5 High
- linux, linux kernel +1 morenet/handshake: Drain pending requests at net namespace exit9.8 Critical
- linux, linux kernel +1 moredpll: zl3073x: use __dpll_device_change_ntf() and remove change_work7.8 High
- linux, linux kernel +1 moresctp: fix race between sctp_wait_for_connect and peeloff7.8 High
- linux, linux kernel +1 morememfd: deny writeable mappings when implying SEAL_WRITE8.4 High
- linux, linux kernel +1 moreBluetooth: ISO: fix UAF in iso_recv_frame8.8 High
- linux, linux kernel +1 moreBluetooth: ISO: serialize iso_sock_clear_timer with socket lock7.8 High
- linux, linux kernel +1 moreparport: Fix race between port and client registration7.8 High
- linux, linux kernel +1 moredrm/gem: fix race between change_handle and handle_delete8.8 High
- linux, linux kernel +1 moreserial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ7.3 High
- linux, linux kernel +1 moredrm/amdgpu: fix amdgpu_hmm_range_get_pages7.8 High
- linux, linux kernel +1 morenet: mctp: usb: fix race between urb completion and rx_retry cancellation7.8 High
- linux, linux kernel +1 moreBluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls4.7 Medium
- linux, linux kernel +1 moremptcp: close TOCTOU race while computing rcv_wnd8.2 High
- linux, linux kernel +1 morenetfilter: nf_tables: add hook transactions for device deletions7.8 High
- linux, linux kernel +1 moreRevert "f2fs: remove non-uptodate folio from the page cache in move_data_block"7.8 High
- linux, linux kernel +1 moreblk-cgroup: fix UAF in __blkcg_rstat_flush()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morei2c: core: fix adapter registration race7.8 High
- awesto django-shopawesto django-shop Purchase Stock inventory.py race condition2.3 Low
- No product listedallegro Hostname Allocation assets.py AssetLastHostname.increment_hostname race condition2.1 Low
- No product listeddjango-tastypie throttle.py CacheDBThrottle race condition2.3 Low
- sipeed picoclawSipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou4.8 Medium
- ibm cognos analyticsIBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurr…5.4 Medium
- No product listedA race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment ...7.2 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 +7 more +9 moreWindows Backup Service Elevation of Privilege Vulnerability7.0 High
- envoyproxy gatewayEnvoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock5.3 Medium
- github view componentview_component: Reused Component Instances Retain Stale Render Context6.8 Medium
- flameshot-org flameshotFlameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"5.1 Medium
- spectolabs hoverflyHoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode7.5 High
- Show moreLoading…