CVEbaza.pl › Słownik CWE › CWE-1058

Common Weakness Enumeration

CWE-1058

Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element

Kategoria: BaseCVE: 1

Opis

Kod zawiera funkcję lub metodę operującą w środowisku wielowątkowym, która posiada niebezpieczny niefinalny statyczny element do przechowywania danych lub element członkowski. To może prowadzić do wyścigów danych i niespójności stanu między wątkami.

Description (EN)

The code contains a function or method that operates in a multi-threaded environment but owns an unsafe non-final static storable or member data element.

Podatności CVE z CWE-1058 (1)

8.8

CVSS

HIGH

CVE-2026-46152

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211_rx_mesh_data() and the switch on res. That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued. Make res an automatic variable so each invocation keeps its own result.

pub. 2026-05-28

Informacje

ID: CWE-1058

Typ: Base

Podatności: 1

MITRE CWE ↗

← Słownik CWE