Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-4018 EUVD-2026-44321GHSA-vm3p-4vxh-gffg

TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety

Published Jul 14, 2026 · Updated Jul 15, 2026 · Assigned by blackberry

Vendor: BlackBerry Product: QNX OS for Medical Product: QNX OS for Safety Product: QNX Software Development Platform

Description

TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.

Affected products

VendorProductAffectedFixed
BlackBerry QNX Software Development Platform 7.1, cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*, 7.0, cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:* —
BlackBerry QNX OS for Safety 2.2.8 and earlier, cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:*, 2.1.5 and earlier, cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:*, 2.0.3 and earlier, cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:* —
BlackBerry QNX OS for Medical 2.0.2 and earlier, cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:* —

References