CVE Database

CVE-2022-2959 High · 7.0 CWE-362 Aug 25, 2022

A race condition was found in the Linux kernel's watch queue due to a missing lock in...

A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.

CVE-2020-36558 Medium · 5.1 CWE-362 Jul 21, 2022

Race Condition in Linux Linux Kernel

A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.

CVE-2022-20154 Medium · 6.4 CWE-362 Jun 15, 2022

In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This...

In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream kernel

CVE-2022-1462 Medium · 6.3 CWE-362 Jun 2, 2022

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs...

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.

CVE-2022-26904 High · 7.0 KEV High · 68 Public exploit CWE-362 Apr 15, 2022

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2021-0920 Medium · 6.4 KEV High · 47 CWE-362 Dec 15, 2021

Android Kernel Race Condition Vulnerability

In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel

CVE-2021-25395 Medium · 6.4 KEV CWE-362 Jun 11, 2021

Samsung Mobile Devices Race Condition Vulnerability

A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

CVE-2021-25394 Medium · 6.4 KEV CWE-362 Jun 11, 2021

Samsung Mobile Devices Race Condition Vulnerability

A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.

CVE-2020-8670 Medium · 6.4 CWE-362 Jun 9, 2021

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to...

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2021-21166 High · 8.8 KEV High · 56 CWE-362 Mar 9, 2021

Google Chromium Race Condition Vulnerability

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-29374 Low · 3.6 CWE-362 Nov 28, 2020

Race Condition in Linux Linux Kernel

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58.

CVE-2020-14416 Medium · 4.2 CWE-362 Jun 18, 2020

Race Condition in Linux Linux Kernel

In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.

CVE-2020-6820 High · 8.1 KEV High · 55 CWE-362 Apr 24, 2020

Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.

CVE-2020-6819 High · 8.1 KEV High · 54 CWE-362 Apr 24, 2020

Mozilla Firefox And Thunderbird Use-After-Free Vulnerability

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.

CVE-2016-5195 High · 7.0 KEV Urgent · 70 Public exploit CWE-362 Nov 10, 2016

Linux Kernel Race Condition Vulnerability

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

CVE-2014-0196 Medium · 5.5 KEV High · 67 Public exploit CWE-362 May 7, 2014

Linux Kernel Race Condition Vulnerability

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.