PT-2025-32699 · Intel · Intel Connectivity Performance Suite

Name of the Vulnerable Software and Affected Versions: IntelR Connectivity Performance Suite versions prior to 40.24.11210 Description: A time-of-check time-of-use TOCTOU race condition exists in some IntelR Connectivity Performance Suite software installers. This may allow an authenticated user ...

Intel® Connectivity Performance Suite Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Connectivity Performance Suite software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20074 Description: Time-of-check...

PT-2025-32781

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: A time-of-check time-of-use TOCTOU race condition exists in Windows NTFS, potentially allowing an unauthorized attacker to disclose information locally. Recommendations: At the moment,...

Linux Distros Unpatched Vulnerability : CVE-2025-38217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: ftsteutates Fix TOCTOU race in ftsread In the ftsread function, when handling...

CLSA-2025-1754650455 tomcat: Fix of CVE-2024-56337

CVE-2024-56337: prevent time-of-check time-of-use TOCTOU race condition vulnerability by strengthening file validation logic during request handling and closing the gap left by the partial mitigation in CVE‑2024‑50379...

Linux Distros Unpatched Vulnerability : CVE-2021-23977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application...

net: Fix TOCTOU issue in sk_is_readable()

...

hwmon: (ftsteutates) Fix TOCTOU race in fts_read()

...

Linux Distros Unpatched Vulnerability : CVE-2020-25212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other...

SUSE CVE-2024-8244

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of use race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress...

CVE-2024-8244

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of use race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress...

CVE-2024-8244

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of use race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress...

CVE-2025-27076 Time-of-check Time-of-use (TOCTOU) Race Condition in Display

Memory corruption while processing simultaneous requests via escape path...

CVE-2025-27076 Time-of-check Time-of-use (TOCTOU) Race Condition in Display

Memory corruption while processing simultaneous requests via escape path...

CVE-2025-21473 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Memory corruption when using Virtual cdm Camera Data Mover to write registers...

CVE-2025-21473

CVE-2025-21473 describes a memory corruption vulnerability in Qualcomm chipsets when using Virtual cdm (Camera Data Mover) to write registers. The root cause is memory corruption from register writes, with references across sources noting a TOCTOU race aspect in Camera_Linux. Impact is described ...

CVE-2025-21455

CVE-2025-21455 describes memory corruption when submitting blob data to kernel space through IOCTL on Qualcomm chipsets. Affected component: kernel IOCTL handling for blob data. Root cause: memory corruption in blob submission path; exploitation is local (attack vector LOCAL) with low privileges ...

AZL-65783 CVE-2025-38461 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect newtransport from becoming a stale pointer. This also takes care of an insecure call in vsockuselocaltransport; add a lockdep assert. BUG: unab...

VulnCheck KEV: CVE-2025-34027

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The Spack upload endpoint can be leveraged for a Time-of-Check to Time-of-Use TOCTOU write in combination...

tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation

The fix for CVE-2024-50379 in Apache Tomcat was insufficient to mitigate the issue fully. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to...