cve.bz

CWE-364: Signal Handler Race Condition

Filter

The product uses a signal handler that introduces a race condition.

What the weakness is: CWE-364 at MITRE. All weaknesses

Ask an AI about CWE-364

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-364: Signal Handler Race Condition and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/364.html and https://cve.bz/cve/cwe/364?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-53185EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_bvec_write_partial() zram_read_page() picks the sync or async backing device read path based on whether the parent bio is NULL. zram_bv…

  2. 7.8CVE-2026-52910EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. [0] The repro sets up a UDP reuseport group with a cBPF prog and…

  3. 7.8CVE-2026-46090EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side when playback starts with parameters that no longer match a…

  4. 7.5CVE-2026-42002EPSS 0.3%

    Concurrency and locking defects in GSS-TSIG

  5. 3.3CVE-2026-33565EPSS 0.09%

    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.

  6. 5.5CVE-2026-27766EPSS 0.1%

    in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.

  7. 8.1CVE-2026-24792EPSS 0.4%

    in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.

  8. 7.8CVE-2026-31474EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() isotp_sendmsg() uses only cmpxchg() on so->tx.state to serialize access to so->tx.buf. isotp_release() waits for…

  9. 8.8CVE-2026-34771EPSS 0.3%

    Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that register an asynchronous session.setPermissionRequestHandler() m…

  10. 7.5CVE-2026-4684EPSS 0.4%

    Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  11. 6.5CVE-2025-53092EPSS 0.3%

    Strapi is an open source headless content management system. Strapi versions prior to 5.20.0 contain a CORS misconfiguration vulnerability in default installations. By default, Strapi reflects the value of the Origin header back in the Acc…

  12. 4.7CVE-2025-4598EPSS 1.3%

    A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitiv…

  13. 8.1CVE-2024-7589EPSS 2.0%

    A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked when a client does not authenticate within the LoginGraceTime seconds (120 by default). This signal handler executes in …

  14. 7.0CVE-2024-6409EPSS 28%

    A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a set time period, then sshd's SIGALRM handler is called asynchronously. However, this s…

  15. 8.1CVE-2024-6387ExploitEPSS 99.5%

    A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by fai…

  16. 5.9CVE-2023-5676EPSS 0.4%

    In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

  17. 5.9CVE-2023-1285EPSS 0.7%

    Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in E…

  18. 5.5CVE-2020-14317EPSS 0.2%

    It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing regression. An attacker could exploit this by modifying the…

  19. 4.7CVE-2019-3805EPSS 0.2%

    A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /va…

  20. 5.4CVE-1999-0035EPSS 0.8%

    Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.