CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 12)
Page 12 of 28 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-42959 | High | 7.0 | 2024-07-29 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel p… |
CVE-2024-41020 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 ("fi… |
CVE-2024-6778 | High | 7.5 | 2024-07-16 | Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML i… |
CVE-2022-48858 | High | 7.0 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warning due to a… |
CVE-2022-48842 | Medium | 4.7 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 ("ice: Avoid RTNL… |
CVE-2022-48830 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotp_rcv() When receiving a CAN fr… |
CVE-2022-48784 | Medium | 4.7 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous fix here to fix the… |
CVE-2024-41005 | Medium | 4.7 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in netpoll_owner_active KCSAN detected a race condition in ne… |
CVE-2024-40976 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/lima: mask irqs in timeout path before hard reset There is a race condition in which… |
CVE-2024-40953 | High | 7.9 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() Use {READ,WRITE}_ONCE() t… |
CVE-2024-40943 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix races between hole punching and AIO+DIO After commit "ocfs2: return real error… |
CVE-2024-39508 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags Utilize set_bit() and test_… |
CVE-2024-39503 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ack… |
CVE-2024-39500 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: sock_map: avoid race between sock_map_close and sk_psock_put sk_psock_get will return NUL… |
CVE-2024-39554 | Medium | 5.9 | 2024-07-10 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability the Routing Protocol Daemon (rpd) of Juniper Ne… |
CVE-2024-34725 | High | 7.0 | 2024-07-09 | In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of pri… |
CVE-2024-34724 | High | 7.0 | 2024-07-09 | In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in th… |
CVE-2024-31327 | High | 7.0 | 2024-07-09 | In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege… |
CVE-2024-6387 | High | 8.1 | 2024-07-01 | A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an uns… |
CVE-2024-39296 | Medium | 4.7 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix oops during rmmod "rmmod bonding" causes an oops ever since commit cc317ea3d… |
CVE-2024-39293 | Critical | 9.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: Revert "xsk: Support redirect to any socket bound to the same umem" This reverts commit 2… |
CVE-2024-38306 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: protect folio::private when attaching extent buffer folios [BUG] Since v6.8 there… |
CVE-2024-37354 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix crash on racing fsync and size-extending write into prealloc We have been seei… |
CVE-2024-32936 | High | 7.8 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: Fix races while restarting DMA After the frame is submitted to D… |
CVE-2024-38628 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. … |
CVE-2022-48759 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev struct rpmsg_ctrldev… |
CVE-2022-48745 | Medium | 4.7 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use del_timer_sync in fw reset flow of halting poll Substitute del_timer() with… |
CVE-2021-47599 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: use latest_dev in btrfs_show_devname The test case btrfs/238 reports the warning b… |
CVE-2021-47577 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: io-wq: check for wq exit after adding new worker task_work We check IO_WQ_BIT_EXIT before… |
CVE-2024-38613 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to ret… |
CVE-2024-38601 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rb_get_reade… |
CVE-2024-38596 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition ha… |
CVE-2024-0397 | High | 7.4 | 2024-06-17 | A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_cert… |
CVE-2024-32908 | High | 7.8 | 2024-06-13 | In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with no additi… |
CVE-2024-32899 | High | 7.0 | 2024-06-13 | In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escal… |
CVE-2024-32891 | High | 7.0 | 2024-06-13 | In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no addi… |
CVE-2024-35255 | Medium | 5.5 | 2024-06-11 | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability |
CVE-2024-2032 | Low | 3.1 | 2024-06-06 | A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creation of multiple users with the same user… |
CVE-2024-28999 | Medium | 6.4 | 2024-06-04 | The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console. |
CVE-2024-36927 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __… |
CVE-2024-36899 | High | 7.0 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occ… |
CVE-2024-36894 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete FFS based appli… |
CVE-2024-36028 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() When I did memo… |
CVE-2024-36024 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable idle reallow as part of command/gpint execution [Why] Workaroud… |
CVE-2021-47507 | Medium | 4.7 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix nsfd startup race (again) Commit bd5ae9288d64 ("nfsd: register pernet ops last… |
CVE-2021-47493 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix race between searching chunks and release journal_head from buffer_head Encoun… |
CVE-2021-47461 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a race between writeprotect and exit_mmap() A race is possible when a pr… |
CVE-2023-52872 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix race condition in status line change on dead connections gsm_cleanup_mux(… |
CVE-2023-52847 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There may be some a race… |
CVE-2023-52825 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix a race condition of vram buffer unref in svm code prange->svm_bo unref ca… |
CVE-2023-52785 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR If command timeout h… |
CVE-2023-52771 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix delete_endpoint() vs parent unregistration race The CXL subsystem, at cxl_m… |
CVE-2023-52749 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix null dereference on suspend A race condition exists where a synchronous (noqueue… |
CVE-2023-52740 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch The RFI an… |
CVE-2021-47382 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix deadlock during failing recovery Commit 0b9902c1fcc5 ("s390/qeth: fix dead… |
CVE-2021-47248 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: udp: fix race between close() and udp_abort() Kaustubh reported and diagnosed a panic in… |
CVE-2024-35977 | Medium | 4.7 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_uart: properly fix race condition The cros_ec_uart_probe() funct… |
CVE-2024-35899 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0… |
CVE-2024-35898 | High | 7.0 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregiste… |
CVE-2024-35848 | High | 7.0 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nv… |
CVE-2024-35809 | Medium | 4.7 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the… |
CVE-2024-35798 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race in read_extent_buffer_pages() There are reports from tree-checker that de… |
CVE-2024-27419 | Medium | 4.7 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: netrom: Fix data-races around sysctl_net_busy_read We need to protect the reader reading… |
CVE-2024-27415 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack n… |
CVE-2024-27408 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup … |
CVE-2024-27404 | High | 8.2 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remote_id Similar to the previous patch, address the data race o… |
CVE-2024-30046 | Medium | 5.9 | 2024-05-14 | Visual Studio Denial of Service Vulnerability |
CVE-2024-30031 | High | 7.8 | 2024-05-14 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2024-32997 | High | 8.4 | 2024-05-14 | Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32993 | Medium | 5.6 | 2024-05-14 | Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32985 | Medium | 5.9 | 2024-05-14 | Stellar-core is a reference implementation for the peer-to-peer agent that manages the Stellar network. Prior to 20.4.0, core nodes could be randomly crashed d… |
CVE-2023-52720 | Medium | 4.1 | 2024-05-14 | Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48689 | High | 7.0 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report [1] sho… |
CVE-2023-27359 | High | 8.1 | 2024-05-03 | TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows remote attackers to gain access to LAN-side services on affected… |
CVE-2023-37244 | Medium | 5.3 | 2024-05-02 | The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlin… |
CVE-2024-27080 | Medium | 4.7 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when detecting delalloc ranges during fiemap For fiemap we recently stopp… |
CVE-2024-27062 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no locking un… |
CVE-2024-27058 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: tmpfs: fix race on handling dquot rbtree A syzkaller reproducer found a race while attemp… |
CVE-2024-27030 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF t… |
CVE-2024-27020 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_exp… |
CVE-2024-27019 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj(… |
CVE-2024-27009 | Medium | 4.7 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix race condition during online processing A race condition exists in ccw_devi… |
CVE-2024-27005 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access req_list while it's being manipulated The icc_lock mutex was s… |
CVE-2024-26984 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS in parallel… |
CVE-2024-26960 | High | 7.0 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a the… |
CVE-2024-26942 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: phy: qcom: at803x: fix kernel panic with at8031_probe On reworking and splitting the… |
CVE-2024-33904 | High | 7.0 | 2024-04-29 | In plugins/HookSystem.cpp in Hyprland through 0.39.1 (before 28c8561), through a race condition, a local attacker can cause execution of arbitrary assembly cod… |
CVE-2024-26923 | High | 7.8 | 2024-04-25 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take i… |
CVE-2024-3979 | Medium | 4.4 | 2024-04-19 | A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10. Affected by this issue is some unknown functionality. The… |
CVE-2024-32477 | High | 7.7 | 2024-04-18 | Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between `libc::tcflush(0, libc::TCIFL… |
CVE-2023-3758 | High | 7.1 | 2024-04-18 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issue… |
CVE-2024-26910 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in swap operation The patch "netfilter: ipse… |
CVE-2023-52645 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix race conditions with genpd If the power domains are registered fi… |
CVE-2024-26897 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete The ath9k_wmi_… |
CVE-2024-26878 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereferen… |
CVE-2024-26869 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption… |
CVE-2024-26862 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: packet: annotate data-races around ignore_outgoing ignore_outgoing is read locklessly fro… |
CVE-2024-26861 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wireguard: receive: annotate data-race around receiving_counter.counter Syzkaller with KC… |
CVE-2024-26859 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net/bnx2x: Prevent access to a freed page in page_pool Fix race condition leading to syst… |
CVE-2024-26837 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: switchdev: Skip MDB replays of deferred events on offload Before this change… |