cve.bz

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition), page 26

Filter

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

What the weakness is: CWE-362 at MITRE

Ask an AI about CWE-362

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/362.html and https://cve.bz/cve/cwe/362?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.6CVE-2024-12747EPSS 0.4%

    A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a …

  2. 7.0CVE-2024-57876EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topology removal If the MST topology is removed during the reception of an MST down reply or MST up request sideband message…

  3. 4.7CVE-2024-56788EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: fix tx skb race condition between reference pointers There are two skb pointers to manage tx skb's enqueued from n/w stack. waiting_tx_skb pointer…

  4. 5.9CVE-2024-56441EPSS 0.1%

    Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  5. 5.9CVE-2024-54120EPSS 0.1%

    Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

  6. 6.3CVE-2024-56706EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU hardware is done at first event creation and is protected by a pair of mutex_lo…

  7. 5.9CVE-2024-53476EPSS 0.6%

    A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product…

  8. 7.0CVE-2024-56664EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (with a socket different from the one stored) may race with socket's close() link popping & un…

  9. 4.7CVE-2024-56637EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Hold module reference while requesting a module User space may unload ip_set.ko while it is itself requesting a set type backend module, leading to a k…

  10. 7.0CVE-2024-56635EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in default_operstate() syzbot reported an UAF in default_operstate() [1] Issue is a race between device and netns dismantles. After calling __…

  11. 4.7CVE-2024-56576EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix crash in the probe error path when using polling If an error occurs in the probe() function, we should remove the polling timer that was alarme…

  12. 4.7CVE-2024-56568EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference occurs due to a race between smmu driver probe and client driver probe, when of_d…

  13. 7.0CVE-2024-56556EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: binder: fix node UAF in binder_add_freeze_work() In binder_add_freeze_work() we iterate over the proc->nodes with the proc->inner_lock held. However, this lock is tempor…

  14. 4.7CVE-2024-56552EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc_submit: fix race around suspend_pending Currently in some testcases we can trigger: xe 0000:03:00.0: [drm] Assertion `exec_queue_destroyed(q)` failed! .... W…

  15. 4.7CVE-2024-56540EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a…

  16. 7.0CVE-2024-53186EPSS 0.5%

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists between SMB request handling in `ksmbd_conn_handler_loop()` and the freeing of `ksmbd_conn` in …

  17. 5.5CVE-2024-52906EPSS 0.1%

    IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service.

  18. 4.7CVE-2024-53160EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu KCSAN reports a data race when access the krcp->monitor_work.timer.expires variable in the schedule_delayed_mo…

  19. 9.2CVE-2024-11144EPSS 0.4%

    The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfe…

  20. 4.8CVE-2024-48872EPSS 0.3%

    Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, and 9.5.x <= 9.5.12 fail to prevent concurrently checking and updating the failed login attempts. which allows an attacker to bypass of "Max failed attempts" restric…

  21. 7.8CVE-2024-47892EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  22. 7.8CVE-2024-46971EPSS 0.1%

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  23. 4.7CVE-2024-54122EPSS 0.09%

    Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability.

  24. 5.9CVE-2024-54102EPSS 0.1%

    Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  25. 5.1CVE-2024-54510EPSS 0.2%

    A race condition was addressed with improved locking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to leak sensit…

  26. 5.9CVE-2024-54494EPSS 0.8%

    A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An attacker ma…

  27. 8.1CVE-2024-49132EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  28. 7.5CVE-2024-49129EPSS 0.8%

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

  29. 8.1CVE-2024-49128EPSS 1.2%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  30. 8.1CVE-2024-49127EPSS 1.3%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  31. 8.1CVE-2024-49126EPSS 1.3%

    Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

  32. 8.1CVE-2024-49124EPSS 1.4%

    Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

  33. 8.1CVE-2024-49123EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  34. 8.1CVE-2024-49122EPSS 21%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  35. 8.1CVE-2024-49120EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  36. 8.1CVE-2024-49119EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  37. 8.1CVE-2024-49118EPSS 1.4%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  38. 8.1CVE-2024-49116EPSS 10%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  39. 8.1CVE-2024-49115EPSS 1.1%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  40. 8.1CVE-2024-49108EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  41. 8.1CVE-2024-49106EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  42. 7.0CVE-2024-49097EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  43. 7.0CVE-2024-49095EPSS 0.4%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  44. 7.0CVE-2024-49084EPSS 0.4%

    Windows Kernel Elevation of Privilege Vulnerability

  45. 7.0CVE-2024-49059EPSS 0.4%

    Microsoft Office Elevation of Privilege Vulnerability

  46. 4.7CVE-2024-53136EPSS 0.4%

    In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing de…

  47. 4.7CVE-2024-53124EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk->sk_forward_alloc Syzkaller reported this warning: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 16 at net/ipv4/af_inet.c:156…

  48. 5.5CVE-2024-53123EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: mptcp: error out earlier on disconnect Eric reported a division by zero splat in the MPTCP protocol: Oops: divide error: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 P…

  49. 5.5CVE-2024-53122EPSS 0.5%

    In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow lis…

  50. 5.5CVE-2024-53121EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the …