CVE-2026-92050

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to race condition in the XPConnect component...

EUVD-2026-81326

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

CVE-2026-25278 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

EUVD-2026-81283

AVideo through 29.0 contains a race condition in the enforceRateLimit function that fails to atomically increment rate limit counters, allowing attackers to bypass all rate limits including login brute-force protection by issuing concurrent requests. Attackers can submit parallel credential...

CVE-2026-93131: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-privacy: Fix race condition Accessing priv-featurespresent needs to happen with the list mutex being held, otherwise priv can be freed at any moment...

CVE-2026-82761: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and authenticate as the target subject. A magic link configured with singleusetoken?, which is the default, is meant to be...

PT-2026-94570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the NFC PN533 driver where the request skb socket buffer can be freed while the transport is still using it. This occurs because pn533 send async publishes the...

PT-2026-94388

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.18 Description The save file endpoint in the File Manager, used by the Query Tool and ERD, contains a race condition. While the system validates the requested path using the check access permission function, it...

PT-2026-94528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mtip32xx block driver where ioctl handlers only check the REMOVE PENDING flag before calling mtip hw ioctl. This allows a device removal process to set the...

PT-2026-94439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth L2CAP implementation. For L2CAP sockets that do not own sk-sk socket, a lockless read of l2cap pisk-chan within the l2cap sock cleanup listen...

PT-2026-94583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunrpc xprtsock component where shared socket callbacks are handled using plain stores and loads. Specifically, when SUNRPC manages AF LOCAL, UDP, or TCP sockets a...

PT-2026-94656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/erdma component where AE QP fatal events and iWARP CM paths load Queue Pairs QPs from dev-qp xa and reference them outside the xarray lock. This allows erdma...

PT-2026-94658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the xenbus component of the Linux kernel during device initialization. The otherend id field is initialized only after the xenbus read otherend details functio...

CVE-2026-90389: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md: scope memallocnoio to allocation critical sections Storing a memallocnoiosave token in mddev-noioflags lets one task save the token and another task restore it. With concurrent suspend sysfs writes, task A can enter...

CVE-2026-93041: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize abort state updates dwedmaabortinterrupt drops vc.lock before changing request and status. issuepending can acquire the lock in that small window, observe the old busy state, and skip starting queued...

CVE-2026-90393: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpfnetnslinkupdateprog In bpfnetnslinkupdateprog, the checks for oldprog and prog type are currently performed locklessly before acquiring netnsbpfmutex. This creates a race condition that can lead to a...

CVE-2026-93052: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgqinited bcmvksyncmsgq fills the message queue information and then sets msgqinited. Readers call bcmvkdrvaccessok before accessing the message queues and their cached queue information...

CVE-2026-93152: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...

PT-2026-94142

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs in the device control handler when multiple threads issue concurrent IOCTL Input/Output Control requests. This issue is caused by improp...

PT-2026-94145

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs during the processing of I2C transfer requests. This issue is caused by a race condition, which is a situation where the timing or order...