Weaknesses of type CWE-364

20 results

Condição de corrida em manipulador de sinais

Ocorre quando um manipulador de sinais (signal handler) acessa ou modifica dados compartilhados sem sincronização adequada, enquanto a thread principal também acessa esses mesmos dados. O sistema operacional pode interromper a execução principal para executar o handler em qualquer momento, causando corrupção de dados, inconsistência de estado ou comportamento imprevisível se ambos tentam modificar a mesma variável simultaneamente.

Example

Um servidor em C incrementa um contador global de conexões na thread principal. Quando um sinal SIGTERM chega, o manipulador de sinais tenta ler e logar esse mesmo contador para encerramento gracioso. Se o sinal interromper o incremento no meio da operação, o manipulador lê um valor corrompido ou o programa falha tentando acessar memória inválida.

How to mitigate

Use apenas funções async-signal-safe (como write() ou exit()) dentro de manipuladores de sinais. Para dados compartilhados, set uma variável volátil simples (volatile sig_atomic_t) como flag, e deixe a thread principal verificar esse flag em pontos seguros. Considere também usar mecanismos modernos como epoll ou sigwait em threads dedicadas em vez de signal handlers tradicionales.

CVE-2024-6387HIGHOpenssh: regresshion - race condition in ssh allows rce/dosEPSS 99.5%CVE-2024-6409HIGHOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9EPSS 27.9%CVE-2024-7589HIGHOpenSSH pre-authentication async signal safety issueEPSS 2.0%CVE-1999-0035MEDIUMRace condition in signal handling routine in ftpd, allowing read/write arbitrary files.EPSS 0.8%CVE-2025-4598MEDIUMSystemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpEPSS 0.7%CVE-2023-1285HIGHSignal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit EPSS 0.7%CVE-2026-24792HIGHweb_webview has a Race Condition vulnerabilityEPSS 0.4%CVE-2023-5676MEDIUMEclipse OpenJ9 possible infinite busy hangEPSS 0.4%CVE-2026-4684HIGHRace condition, use-after-free in the Graphics: WebRender componentEPSS 0.4%CVE-2026-34771HIGHElectron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacksEPSS 0.3%CVE-2025-53092MEDIUMStrapi core vulnerable to sensitive data exposure via CORS misconfigurationEPSS 0.3%CVE-2026-42002MEDIUMConcurrency and locking defects in GSS-TSIGEPSS 0.3%CVE-2020-14317—It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - CEPSS 0.2%CVE-2019-3805MEDIUMA flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminateEPSS 0.2%CVE-2026-52910HIGHbpf: Free reuseport cBPF prog after RCU grace period.EPSS 0.2%CVE-2026-31474HIGHcan: isotp: fix tx.buf use-after-free in isotp_sendmsg()EPSS 0.1%CVE-2026-27766MEDIUMmultimedia_audio_framework has a Race Condition vulnerabilityEPSS 0.1%CVE-2026-46090HIGHALSA: aloop: Fix peer runtime UAF during format-change stopEPSS 0.1%CVE-2026-53185HIGHzram: fix use-after-free in zram_bvec_write_partial()EPSS 0.1%CVE-2026-33565LOWkernel_linux_common_modules has a Race Condition vulnerabilityEPSS 0.1%