Falhas do tipo CWE-362

1.090 resultados

Condição de corrida

Ocorre quando dois ou mais threads/processos acessam um recurso compartilhado (arquivo, memória, banco de dados) quase simultaneamente, e o resultado final depende da ordem de execução que não é controlada. Se a sincronização falha, um thread pode ler ou modificar dados enquanto outro está no meio da operação, causando inconsistência ou comportamento imprevisto.

Exemplo

Um sistema de autenticação que verifica se um arquivo de token existe (sem estar sincronizado): thread A verifica que o arquivo não existe no instante T1, thread B cria o token no instante T2, mas thread A já passou da verificação e cria um novo token conflitante em T3. O resultado depende do timing, não da lógica.

Como mitigar

Use mecanismos de sincronização (locks, mutexes, operações atômicas) ao acessar recursos compartilhados, ou redesenhe a lógica para evitar compartilhamento (cada thread com seu espaço). Para operações de arquivo, use flags de criação exclusiva (O_EXCL em Unix) em vez de verificar-depois-criar.

CVE-2026-56988MEDIUMIn multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation oEPSS 0.1%CVE-2025-54629MEDIUMRace condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this EPSS 0.1%CVE-2025-48641HIGHIn multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilegeEPSS 0.1%CVE-2025-54651MEDIUMRace condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect service confidentiaEPSS 0.1%CVE-2023-20685MEDIUMIn vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution EPSS 0.1%CVE-2023-20684MEDIUMIn vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution EPSS 0.1%CVE-2026-58734HIGHIn google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalEPSS 0.1%CVE-2026-58728HIGHIn ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege withEPSS 0.1%CVE-2023-20687MEDIUMIn display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System executEPSS 0.1%CVE-2025-68969MEDIUMMulti-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affectEPSS 0.1%CVE-2026-58724HIGHIn multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with SysEPSS 0.1%CVE-2023-20686MEDIUMIn display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System executEPSS 0.1%CVE-2026-58701HIGHIn trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalatEPSS 0.1%CVE-2025-66328HIGHMulti-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affectEPSS 0.1%CVE-2022-47331MEDIUMIn wlan driver, there is a race condition. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2026-34849LOWUAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-22442HIGHIn multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created EPSS 0.1%CVE-2023-20835MEDIUMIn camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System executioEPSS 0.1%CVE-2025-66327HIGHRace condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentialityEPSS 0.1%CVE-2023-20736MEDIUMIn vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System executEPSS 0.1%