#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post
CVE-2026-112906: CVE-2026-112906: Mutual Exclusion Bypass via Inode Recycling and Time Tracking Race in filelock
📰

CVE-2026-112906: CVE-2026-112906: Mutual Exclusion Bypass via Inode Recycling and Time Tracking Race in filelock

DEV Community: cybersecurity·CVE Reports·1 day ago
#vEzL82Fq
#devtocybersecurity#devto#dev#filelock#race
Reading 0:00
15s threshold

CVE-2026-112906: Mutual Exclusion Bypass via Inode Recycling and Time Tracking Race in filelock

Vulnerability ID: CVE-2026-112906

CVSS Score: 4.7

Published: 2026-10-23

A local race condition and mutual exclusion bypass vulnerability exists in filelock versions 4.1.0 through 4.2.0. On Linux filesystems with rapid inode reuse, a local attacker can manipulate modification timestamps and lock files to cause waiting processes to falsely evict active soft lock markers.

TL;DR

filelock versions 4.1.0-4.2.0 track stale locks using a tuple of inode number and modification time.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Create free accountLog in