CVE-2026-4018 TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety

[
  {
    "vendor": "BlackBerry Ltd",
    "product": "QNX Software Development Platform",
    "versions": [
      {
        "status": "affected",
        "version": "7.1"
      },
      {
        "status": "affected",
        "version": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*",
        "versionType": "cpe"
      },
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*",
        "versionType": "cpe"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "BlackBerry Ltd",
    "product": "QNX OS for Safety",
    "versions": [
      {
        "status": "affected",
        "version": "2.2.8 and earlier"
      },
      {
        "status": "affected",
        "version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:*",
        "versionType": "cpe"
      },
      {
        "status": "affected",
        "version": "2.1.5 and earlier"
      },
      {
        "status": "affected",
        "version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:*",
        "versionType": "cpe"
      },
      {
        "status": "affected",
        "version": "2.0.3 and earlier"
      },
      {
        "status": "affected",
        "version": "cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:*",
        "versionType": "cpe"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "BlackBerry Ltd.",
    "product": "QNX OS for Medical",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.2 and earlier"
      },
      {
        "status": "affected",
        "version": "cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:*",
        "versionType": "cpe"
      }
    ],
    "defaultStatus": "unaffected"
  }
]