CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 10)
Page 10 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10468 | Medium | 5.3 | 2024-10-29 | Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox < 13… |
CVE-2024-47827 | Medium | 5.7 | 2024-10-28 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable i… |
CVE-2024-50066 | High | 7.8 | 2024-10-23 | In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix move_normal_pmd/retract_page_tables race In mremap(), move_page_tables() l… |
CVE-2022-49001 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: riscv: fix race when vmap stack overflow Currently, when detecting vmap stack overflow, r… |
CVE-2022-48989 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: fscache: Fix oops due to race with cookie_lru and use_cookie If a cookie expires from the… |
CVE-2024-49981 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venus_remove due to race condition in venus_probe… |
CVE-2024-49872 | Medium | 4.7 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix memfd_pin_folios alloc race panic If memfd_pin_folios tries to create a huget… |
CVE-2024-49866 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processing There is another found exception tha… |
CVE-2024-49864 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix a race between socket set up and I/O thread creation In rxrpc_open_socket(), i… |
CVE-2024-49859 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check atomic_file in f2fs ioctl interfaces Some f2fs ioctl interfaces like f… |
CVE-2024-47741 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race setting file private on concurrent lseek using same fd When doing concurr… |
CVE-2024-47689 | Medium | 5.3 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error() syzbot reports a f2fs bu… |
CVE-2024-47679 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between evice_inodes() and find_inode()&iput() Hi, all Recently I noticed… |
CVE-2024-9936 | Medium | 6.5 | 2024-10-14 | When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vuln… |
CVE-2024-43701 | High | 7.8 | 2024-10-14 | Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. |
CVE-2024-47870 | High | 8.1 | 2024-10-10 | Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **race condition** in the `update_root_in_config` functio… |
CVE-2024-47668 | High | 7.8 | 2024-10-09 | In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase… |
CVE-2024-47660 | Medium | 4.7 | 2024-10-09 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In some setups directories can have many (usu… |
CVE-2024-46870 | Medium | 4.7 | 2024-10-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable DMCUB timeout for DCN35 [Why] DMCUB can intermittently take long… |
CVE-2024-47968 | Medium | 4.4 | 2024-10-07 | Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial of service. |
CVE-2024-47974 | Medium | 4.4 | 2024-10-07 | Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial of service. |
CVE-2024-20509 | Medium | 5.8 | 2024-10-02 | A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remo… |
CVE-2024-47534 | | 2024-10-01 | go-tuf is a Go implementation of The Update Framework (TUF). The go-tuf client inconsistently traces the delegations. For example, if targets delegate to "A"… | |
CVE-2024-46734 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between direct IO write and fsync when using same fd If we have 2 threads… |
CVE-2024-27876 | Medium | 5.5 | 2024-09-17 | A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14… |
CVE-2024-23599 | High | 7.9 | 2024-09-16 | Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potentially enable denial of service via local… |
CVE-2023-41833 | High | 7.5 | 2024-09-16 | A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2024-43467 | High | 7.5 | 2024-09-10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-45300 | High | 7.5 | 2024-09-06 | alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the u… |
CVE-2024-7627 | High | 8.1 | 2024-09-05 | The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writin… |
CVE-2024-44954 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf… |
CVE-2022-48941 | High | 8.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: ice: fix concurrent reset and removal of VFs Commit c503e63200c6 ("ice: Stop processing V… |
CVE-2022-48931 | Medium | 4.7 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs_{,un}register_subsystem() When configfs_register_subsyst… |
CVE-2022-48921 | Medium | 4.7 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweight_entity Syzbot found a GPF in reweight_entity. This has… |
CVE-2024-7885 | High | 7.5 | 2024-08-21 | A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs wh… |
CVE-2022-48898 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer There are… |
CVE-2024-43866 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during d… |
CVE-2024-42300 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix race in z_erofs_get_gbuf() In z_erofs_get_gbuf(), the current task may be migr… |
CVE-2024-34731 | High | 7.0 | 2024-08-15 | In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of p… |
CVE-2024-42488 | Medium | 6.8 | 2024-08-15 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.14.14 and 1.15.8, a race condition in the Cilium… |
CVE-2024-27267 | Medium | 5.9 | 2024-08-14 | The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of ser… |
CVE-2024-38191 | High | 7.8 | 2024-08-13 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38137 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-38136 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-7589 | High | 8.1 | 2024-08-12 | A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked when a client does not authenticate withi… |
CVE-2024-6996 | Low | 3.1 | 2024-08-06 | Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing… |
CVE-2024-40815 | High | 7.5 | 2024-07-29 | A race condition was addressed with additional validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6… |
CVE-2024-27823 | Medium | 5.9 | 2024-07-29 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, mac… |
CVE-2023-42959 | High | 7.0 | 2024-07-29 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel p… |
CVE-2024-41020 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 ("fi… |
CVE-2024-6778 | High | 7.5 | 2024-07-16 | Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML i… |
CVE-2022-48858 | High | 7.0 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warning due to a… |
CVE-2022-48842 | Medium | 4.7 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 ("ice: Avoid RTNL… |
CVE-2022-48830 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotp_rcv() When receiving a CAN fr… |
CVE-2022-48784 | Medium | 4.7 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous fix here to fix the… |
CVE-2024-41005 | Medium | 4.7 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in netpoll_owner_active KCSAN detected a race condition in ne… |
CVE-2024-40976 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/lima: mask irqs in timeout path before hard reset There is a race condition in which… |
CVE-2024-40953 | High | 7.9 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() Use {READ,WRITE}_ONCE() t… |
CVE-2024-40943 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix races between hole punching and AIO+DIO After commit "ocfs2: return real error… |
CVE-2024-39508 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags Utilize set_bit() and test_… |
CVE-2024-39503 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ack… |
CVE-2024-39500 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: sock_map: avoid race between sock_map_close and sk_psock_put sk_psock_get will return NUL… |
CVE-2024-39554 | Medium | 5.9 | 2024-07-10 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability the Routing Protocol Daemon (rpd) of Juniper Ne… |
CVE-2024-34725 | High | 7.0 | 2024-07-09 | In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of pri… |
CVE-2024-34724 | High | 7.0 | 2024-07-09 | In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in th… |
CVE-2024-31327 | High | 7.0 | 2024-07-09 | In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege… |
CVE-2024-6387 | High | 8.1 | 2024-07-01 | A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an uns… |
CVE-2024-39296 | Medium | 4.7 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix oops during rmmod "rmmod bonding" causes an oops ever since commit cc317ea3d… |
CVE-2024-39293 | Critical | 9.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: Revert "xsk: Support redirect to any socket bound to the same umem" This reverts commit 2… |
CVE-2024-38306 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: protect folio::private when attaching extent buffer folios [BUG] Since v6.8 there… |
CVE-2024-37354 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix crash on racing fsync and size-extending write into prealloc We have been seei… |
CVE-2024-32936 | High | 7.8 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: Fix races while restarting DMA After the frame is submitted to D… |
CVE-2024-38628 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. … |
CVE-2022-48759 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev struct rpmsg_ctrldev… |
CVE-2022-48745 | Medium | 4.7 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use del_timer_sync in fw reset flow of halting poll Substitute del_timer() with… |
CVE-2021-47599 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: use latest_dev in btrfs_show_devname The test case btrfs/238 reports the warning b… |
CVE-2021-47577 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: io-wq: check for wq exit after adding new worker task_work We check IO_WQ_BIT_EXIT before… |
CVE-2024-38613 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to ret… |
CVE-2024-38601 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rb_get_reade… |
CVE-2024-38596 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition ha… |
CVE-2024-0397 | High | 7.4 | 2024-06-17 | A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_cert… |
CVE-2024-32908 | High | 7.8 | 2024-06-13 | In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with no additi… |
CVE-2024-32899 | High | 7.0 | 2024-06-13 | In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escal… |
CVE-2024-32891 | High | 7.0 | 2024-06-13 | In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no addi… |
CVE-2024-35255 | Medium | 5.5 | 2024-06-11 | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability |
CVE-2024-2032 | Low | 3.1 | 2024-06-06 | A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creation of multiple users with the same user… |
CVE-2024-28999 | Medium | 6.4 | 2024-06-04 | The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console. |
CVE-2024-36927 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __… |
CVE-2024-36899 | High | 7.0 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occ… |
CVE-2024-36894 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete FFS based appli… |
CVE-2024-36028 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() When I did memo… |
CVE-2024-36024 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable idle reallow as part of command/gpint execution [Why] Workaroud… |
CVE-2021-47507 | Medium | 4.7 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix nsfd startup race (again) Commit bd5ae9288d64 ("nfsd: register pernet ops last… |
CVE-2021-47493 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix race between searching chunks and release journal_head from buffer_head Encoun… |
CVE-2021-47461 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a race between writeprotect and exit_mmap() A race is possible when a pr… |
CVE-2023-52872 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix race condition in status line change on dead connections gsm_cleanup_mux(… |
CVE-2023-52847 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There may be some a race… |
CVE-2023-52825 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix a race condition of vram buffer unref in svm code prange->svm_bo unref ca… |
CVE-2023-52785 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR If command timeout h… |
CVE-2023-52771 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix delete_endpoint() vs parent unregistration race The CXL subsystem, at cxl_m… |