CVE-2026-74546

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically within the adt7470 driver. A local attacker could exploit a time-of-check to time-of-use TOCTOU race condition. If fan data becomes zero between a validation check and a conversion operation, it can lead to a...

EUVD-2026-63671

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use TOCTOU race condition...

Linux Distros Unpatched Vulnerability : CVE-2026-64846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can...

CVE-2026-49114: Time-of-check Time-of-use (TOCTOU) Race Condition

In ONNX before 1.21.0, the 'saveexternaldata' function builds the external-data file path from the model's externaldata location field and opens it for writing without 'ONOFOLLOW/OEXCL', after a non-atomic 'os.path.isfile' check. A local attacker with write access to the directory where a victim...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102022 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-101894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101894 advisory. Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102102 advisory. In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnethdr in tpacketsnd In tpacketsnd, when PACKETVNETHDR is...

CVE-2026-16935

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16935

A TOCTOU race condition in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to escalate privileges, yielding full confidentiality, integrity and availability impact (CVSS 7.8). No exploitation in the wild is reported; IBM support page referenced for patch guidance...

CVE-2026-16935 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16935 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-74378

A flaw was found in the Linux kernel's RDMA/rxe component. A Time-of-check to time-of-use TOCTOU vulnerability exists where a user-space thread can modify the numsge value after it has been validated but before it is used to calculate a memory copy size. This allows a local attacker to trigger a...

CVE-2026-74370

A flaw was found in the Linux kernel's liveupdate module. This vulnerability involves a Time-of-check to Time-of-use TOCTOU race condition within the luosessionretrieve function. A concurrent thread could release and free a session after it has been looked up but before a necessary mutex lock is...

DEBIAN-CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-20908

A flaw was found in the Intel NPU Driver for Windows. This time-of-check time-of-use TOCTOU race condition vulnerability allows an unprivileged, authenticated local attacker to cause a denial of service. The attack has high complexity and requires no user interaction. This could lead to a...

CVE-2026-16927

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16922

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16927

A TOCTOU race condition in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to escalate to root, yielding full confidentiality, integrity, and availability impact (CVSS 7.3 HIGH). CISA reports no known exploitation. IBM's fix is documented at https://www.ibm.com/su...

CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...