CWE-362— Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.— MITRE CWE catalog

3,069 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-362page 55 of 62

CVE-2024-26583MEDIUMCVSS 4.7EG 4.7
2024-02-21
In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(…
CVE-2023-45864MEDIUMCVSS 4.7EG 4.7
2023-12-13
A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modifications of values within certain areas.
CVE-2023-4732MEDIUMCVSS 4.7EG 4.7
2023-10-03
A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.
CVE-2023-42756MEDIUMCVSS 4.7EG 4.7
2023-09-28
A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local us…
CVE-2023-41979MEDIUMCVSS 4.7EG 4.7
2023-09-27
A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system.
CVE-2023-21095MEDIUMCVSS 4.7EG 4.7
2023-06-15
In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User inte…
CVE-2023-2898MEDIUMCVSS 4.7EG 4.7
2023-05-26
There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.
CVE-2023-27952MEDIUMCVSS 4.7EG 4.7
2023-05-08
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks.
CVE-2023-31083MEDIUMCVSS 4.7EG 4.7
2023-04-24
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL point…
CVE-2023-1582MEDIUMCVSS 4.7EG 4.7
2023-04-05
A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service.
CVE-2023-21031MEDIUMCVSS 4.7EG 4.7
2023-03-24
In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Pr…
CVE-2022-46713MEDIUMCVSS 4.7EG 4.7
2023-02-27
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.
CVE-2022-47331MEDIUMCVSS 4.7EG 4.7
2023-02-12
In wlan driver, there is a race condition. This could lead to local denial of service in wlan services.
CVE-2023-21766MEDIUMCVSS 4.7EG 4.7
2023-01-10
Windows Overlay Filter Information Disclosure Vulnerability
CVE-2023-21536MEDIUMCVSS 4.7EG 4.7
2023-01-10
Event Tracing for Windows Information Disclosure Vulnerability
CVE-2022-42771MEDIUMCVSS 4.7EG 4.7
2022-12-06
In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
CVE-2022-42770MEDIUMCVSS 4.7EG 4.7
2022-12-06
In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
CVE-2022-39134MEDIUMCVSS 4.7EG 4.7
2022-12-06
In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.
CVE-2022-45887MEDIUMCVSS 4.7EG 4.7
2022-11-25
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.
CVE-2022-32895MEDIUMCVSS 4.7EG 4.7
2022-11-01
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system.
CVE-2022-41850MEDIUMCVSS 4.7EG 4.7
2022-09-30
roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.
CVE-2022-3303MEDIUMCVSS 4.7EG 4.7
2022-09-27
A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) …
CVE-2022-40307MEDIUMCVSS 4.7EG 4.7
2022-09-09
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
CVE-2022-38170MEDIUMCVSS 4.7EG 4.7
2022-09-02
In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and a…
CVE-2022-39188MEDIUMCVSS 4.7EG 4.7
2022-09-02
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs i…
CVE-2022-0207MEDIUMCVSS 4.7EG 4.7
2022-08-26
A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.
CVE-2022-30212MEDIUMCVSS 4.7EG 4.7
2022-07-12
Windows Connected Devices Platform Service Information Disclosure Vulnerability
CVE-2022-31758MEDIUMCVSS 4.7EG 4.7
2022-06-13
The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-26765MEDIUMCVSS 4.7EG 4.7
2022-05-26
A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass …
CVE-2022-26690MEDIUMCVSS 4.7EG 4.7
2022-05-26
Description: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to modify protected parts of the file system.
CVE-2021-33078MEDIUMCVSS 4.7EG 4.7
2022-05-12
Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access.
CVE-2021-33075MEDIUMCVSS 4.7EG 4.7
2022-05-12
Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access.
CVE-2022-29116MEDIUMCVSS 4.7EG 4.7
2022-05-10
Windows Kernel Information Disclosure Vulnerability
CVE-2022-20097MEDIUMCVSS 4.7EG 4.7
2022-05-03
In aee daemon, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…
CVE-2022-21975MEDIUMCVSS 4.7EG 4.7
2022-03-09
Windows Hyper-V Denial of Service Vulnerability
CVE-2021-20321MEDIUMCVSS 4.7EG 4.7
2022-02-18
A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.
CVE-2021-3753MEDIUMCVSS 4.7EG 4.7
2022-02-16
A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from…
CVE-2021-40015MEDIUMCVSS 4.7EG 4.7
2022-02-09
There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.
CVE-2021-34406MEDIUMCVSS 4.7EG 4.7
2022-01-18
NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a system reboot.
CVE-2021-0298MEDIUMCVSS 4.7EG 4.7
2021-10-19
A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with other syste…
CVE-2021-0443MEDIUMCVSS 4.7EG 4.7
2021-04-13
In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution pr…
CVE-2021-29265MEDIUMCVSS 4.7EG 4.7
2021-03-26
An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the loca…
CVE-2021-28964MEDIUMCVSS 4.7EG 4.7
2021-03-22
A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka…
CVE-2020-35451MEDIUMCVSS 4.7EG 4.7
2021-03-09
There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation.
CVE-2020-36203MEDIUMCVSS 4.7EG 4.7
2021-01-26
An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.
CVE-2021-0320MEDIUMCVSS 4.7EG 4.7
2021-01-11
In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no a…
CVE-2020-35897MEDIUMCVSS 4.7EG 4.7
2020-12-31
An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race.
CVE-2020-35886MEDIUMCVSS 4.7EG 4.7
2020-12-31
An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race.
CVE-2020-35928MEDIUMCVSS 4.7EG 4.7
2020-12-31
An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync.
CVE-2020-35914MEDIUMCVSS 4.7EG 4.7
2020-12-31
An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness.

Map vulnerabilities like CWE-362 to your infrastructure

EchelonGraph correlates every CVE — across CWE-362 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →