CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 11)
Page 11 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52749 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix null dereference on suspend A race condition exists where a synchronous (noqueue… |
CVE-2023-52740 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch The RFI an… |
CVE-2021-47382 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix deadlock during failing recovery Commit 0b9902c1fcc5 ("s390/qeth: fix dead… |
CVE-2021-47248 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: udp: fix race between close() and udp_abort() Kaustubh reported and diagnosed a panic in… |
CVE-2024-35977 | Medium | 4.7 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_uart: properly fix race condition The cros_ec_uart_probe() funct… |
CVE-2024-35899 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0… |
CVE-2024-35898 | High | 7.0 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregiste… |
CVE-2024-35848 | High | 7.0 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nv… |
CVE-2024-35809 | Medium | 4.7 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the… |
CVE-2024-35798 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race in read_extent_buffer_pages() There are reports from tree-checker that de… |
CVE-2024-27419 | Medium | 4.7 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading… |
CVE-2024-27415 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack n… |
CVE-2024-27408 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup … |
CVE-2024-27404 | High | 8.2 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remote_id Similar to the previous patch, address the data race o… |
CVE-2024-30046 | Medium | 5.9 | 2024-05-14 | Visual Studio Denial of Service Vulnerability |
CVE-2024-30031 | High | 7.8 | 2024-05-14 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2024-32997 | High | 8.4 | 2024-05-14 | Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32993 | Medium | 5.6 | 2024-05-14 | Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32985 | Medium | 5.9 | 2024-05-14 | Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be randomly crashed d… |
CVE-2023-52720 | Medium | 4.1 | 2024-05-14 | Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48689 | High | 7.0 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report [1] sho… |
CVE-2023-27359 | High | 8.1 | 2024-05-03 | TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows remote attackers to gain access to LAN-side services on affected… |
CVE-2023-37244 | Medium | 5.3 | 2024-05-02 | The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlin… |
CVE-2024-27080 | Medium | 4.7 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when detecting delalloc ranges during fiemap For fiemap we recently stopp… |
CVE-2024-27062 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no locking un… |
CVE-2024-27058 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: tmpfs: fix race on handling dquot rbtree A syzkaller reproducer found a race while attemp… |
CVE-2024-27030 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF t… |
CVE-2024-27020 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_exp… |
CVE-2024-27019 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj(… |
CVE-2024-27009 | Medium | 4.7 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix race condition during online processing A race condition exists in ccw_devi… |
CVE-2024-27005 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access req_list while it's being manipulated The icc_lock mutex was s… |
CVE-2024-26984 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS in parallel… |
CVE-2024-26960 | High | 7.0 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a the… |
CVE-2024-26942 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: phy: qcom: at803x: fix kernel panic with at8031_probe On reworking and splitting the… |
CVE-2024-33904 | High | 7.0 | 2024-04-29 | In plugins/HookSystem.cpp in Hyprland through 0.39.1 (before 28c8561), through a race condition, a local attacker can cause execution of arbitrary assembly cod… |
CVE-2024-26923 | High | 7.8 | 2024-04-25 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take i… |
CVE-2024-3979 | Medium | 4.4 | 2024-04-19 | A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The… |
CVE-2024-32477 | High | 7.7 | 2024-04-18 | Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between `libc::tcflush(0, libc::TCIFL… |
CVE-2023-3758 | High | 7.1 | 2024-04-18 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issue… |
CVE-2024-26910 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in swap operation The patch "netfilter: ipse… |
CVE-2023-52645 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix race conditions with genpd If the power domains are registered fi… |
CVE-2024-26897 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete The ath9k_wmi_… |
CVE-2024-26878 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereferen… |
CVE-2024-26869 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption… |
CVE-2024-26862 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: packet: annotate data-races around ignore_outgoing ignore_outgoing is read locklessly fro… |
CVE-2024-26861 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wireguard: receive: annotate data-race around receiving_counter.counter Syzkaller with KC… |
CVE-2024-26859 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net/bnx2x: Prevent access to a freed page in page_pool Fix race condition leading to syst… |
CVE-2024-26837 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: switchdev: Skip MDB replays of deferred events on offload Before this change… |
CVE-2024-26243 | High | 7.0 | 2024-04-09 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-26242 | High | 7.0 | 2024-04-09 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26236 | High | 7.0 | 2024-04-09 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-27983 | High | 8.2 | 2024-04-09 | An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is… |
CVE-2023-52553 | High | 7.4 | 2024-04-08 | Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-26810 | High | 7.8 | 2024-04-05 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to… |
CVE-2024-29863 | High | 7.8 | 2024-04-05 | A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR2 (12,80.20200) may allow an existing l… |
CVE-2024-26779 | High | 8.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race condition on enabling fast-xmit fast-xmit must only be enabled a… |
CVE-2024-26708 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race… |
CVE-2024-26698 | Medium | 4.7 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove In commit ac50476717… |
CVE-2023-52639 | Medium | 4.7 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap->pr… |
CVE-2024-26671 | Medium | 4.7 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race In blk_mq_mark_tag_wait(), __add_wait_queue(… |
CVE-2023-42974 | High | 7.0 | 2024-03-28 | A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS… |
CVE-2024-26307 | Medium | 5.3 | 2024-03-21 | Possible race condition vulnerability in Apache Doris. Some of code using `chmod()` method. This method run the risk of someone renaming the file out from unde… |
CVE-2023-52609 | Medium | 4.7 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: binder: fix race between mmput() and do_exit() Task A calls binder_update_page_range() to… |
CVE-2024-2193 | Medium | 5.7 | 2024-03-15 | A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclo… |
CVE-2024-24770 | Medium | 5.3 | 2024-03-14 | vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. Muc… |
CVE-2024-27102 | Critical | 9.9 | 2024-03-13 | Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can potent… |
CVE-2023-52608 | Medium | 4.7 | 2024-03-13 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Check mailbox/SMT channel for consistency On reception of a completio… |
CVE-2024-21445 | High | 7.0 | 2024-03-12 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-21439 | High | 7.0 | 2024-03-12 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26617 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: move mmu notification mechanism inside mm lock Move mmu notification me… |
CVE-2023-52489 | Medium | 4.7 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a… |
CVE-2024-23275 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be… |
CVE-2024-23239 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An ap… |
CVE-2024-23235 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tv… |
CVE-2023-52589 | Medium | 4.7 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ disable race issue In rkisp1_isp_stop() and rkisp1_csi_disable() t… |
CVE-2023-52586 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq… |
CVE-2023-52578 | High | 7.0 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_fini… |
CVE-2023-52517 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain Previously the… |
CVE-2023-52502 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a… |
CVE-2024-1949 | Low | 2.6 | 2024-02-29 | A race condition in Mattermost versions 8.1.x before 8.1.9, and 9.4.x before 9.4.2 allows an authenticated attacker to gain unauthorized access to individual p… |
CVE-2023-52480 | Critical | 9.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A… |
CVE-2023-47634 | Low | 3.1 | 2024-02-29 | Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race condition in the endorsemen… |
CVE-2021-46982 | Medium | 4.7 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix race condition of overwrite vs truncate pos_fsstress testcase complai… |
CVE-2021-46925 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_sock A crash occurs when smc_cdc_tx_handl… |
CVE-2024-26578 | Medium | 5.9 | 2024-02-22 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer.This issue affects Apache Answer: th… |
CVE-2024-26585 | Critical | 9.8 | 2024-02-21 | In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, t… |
CVE-2024-26583 | Critical | 9.8 | 2024-02-21 | In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which call… |
CVE-2024-0041 | High | 7.0 | 2024-02-16 | In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local… |
CVE-2023-41090 | Low | 1.8 | 2024-02-14 | Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2024-24255 | Medium | 4.2 | 2024-02-06 | A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended… |
CVE-2024-24254 | Medium | 4.2 | 2024-02-06 | PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp… |
CVE-2024-24864 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leadi… |
CVE-2024-24861 | Low | 3.3 | 2024-02-05 | A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow… |
CVE-2024-24860 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference is… |
CVE-2024-24859 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception is… |
CVE-2024-24858 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcas… |
CVE-2024-24857 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow i… |
CVE-2024-24855 | Medium | 5.0 | 2024-02-05 | A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference iss… |
CVE-2024-23196 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference iss… |
CVE-2024-22386 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer deref… |