Falhas do tipo CWE-364

20 resultados

Condição de corrida em manipulador de sinal

Ocorre quando um manipulador de sinal (signal handler) acessa ou modifica dados compartilhados sem sincronização adequada, enquanto a thread principal também os acessa. O sinal pode interromper a execução em qualquer momento, criando uma janela onde o estado dos dados fica inconsistente e previsível de forma não determinística.

Exemplo

Um servidor web usa um manipulador SIGUSR1 para recarregar a tabela de configuração. Se a thread principal está atualizando a mesma tabela enquanto o sinal chega, o manipulador pode ler valores parcialmente escritos, causando comportamento indefinido ou corrupção de dados críticos de segurança.

Como mitigar

Minimize operações dentro de manipuladores de sinais — idealmente, apenas defina uma flag `volatile sig_atomic_t` para sinalizar o evento. Processe a mudança de estado na thread principal após retorno do sinal. Use sincronização explícita (mutexes, atomic operations) ou redirecione sinais para threads dedicadas com `sigwait()` em vez de manipuladores assíncronos.

CVE-2024-6387HIGHOpenssh: regresshion - race condition in ssh allows rce/dosEPSS 99.5%CVE-2024-6409HIGHOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9EPSS 27.9%CVE-2024-7589HIGHOpenSSH pre-authentication async signal safety issueEPSS 2.0%CVE-1999-0035MEDIUMRace condition in signal handling routine in ftpd, allowing read/write arbitrary files.EPSS 0.8%CVE-2025-4598MEDIUMSystemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpEPSS 0.7%CVE-2023-1285HIGHSignal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit EPSS 0.7%CVE-2026-24792HIGHweb_webview has a Race Condition vulnerabilityEPSS 0.4%CVE-2023-5676MEDIUMEclipse OpenJ9 possible infinite busy hangEPSS 0.4%CVE-2026-4684HIGHRace condition, use-after-free in the Graphics: WebRender componentEPSS 0.4%CVE-2026-34771HIGHElectron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacksEPSS 0.3%CVE-2025-53092MEDIUMStrapi core vulnerable to sensitive data exposure via CORS misconfigurationEPSS 0.3%CVE-2026-42002MEDIUMConcurrency and locking defects in GSS-TSIGEPSS 0.3%CVE-2020-14317—It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - CEPSS 0.2%CVE-2019-3805MEDIUMA flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminateEPSS 0.2%CVE-2026-52910HIGHbpf: Free reuseport cBPF prog after RCU grace period.EPSS 0.2%CVE-2026-31474HIGHcan: isotp: fix tx.buf use-after-free in isotp_sendmsg()EPSS 0.1%CVE-2026-27766MEDIUMmultimedia_audio_framework has a Race Condition vulnerabilityEPSS 0.1%CVE-2026-46090HIGHALSA: aloop: Fix peer runtime UAF during format-change stopEPSS 0.1%CVE-2026-53185HIGHzram: fix use-after-free in zram_bvec_write_partial()EPSS 0.1%CVE-2026-33565LOWkernel_linux_common_modules has a Race Condition vulnerabilityEPSS 0.1%