Weakness (CWE)
CWE-421: Race Condition During Access to Alternate Channel
Base Draft
The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
Source: MITRE CWE-421
2 results · Clear filters · Feed
-
High 7.5
Kernel: ksmbd race issue from smb2 close and logoff with multichannel
A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue.
-
High 7.5
Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privi…