Time-of-Check Time-of-Use Vulnerability in Virtio Network Device by BlackBerry
CVE-2026-50079

3.3LOW

Key Information:

Vendor

Blackberry Ltd

Status
Qnx Hypervisor
Qnx Hypervisor For Safety
Vendor
CVE Published:
10 November 2026

What is CVE-2026-50079?

A race condition exists in the Virtio network virtual device used by BlackBerry, arising from the time-of-check time-of-use (TOCTOU) flaw. This vulnerability enables an attacker operating within a guest environment to exploit the virtual network device. If exploited, this could lead to instability within the system, resulting in a crash of the QVM, posing significant risks to the integrity and availability of the services relying on this virtual network infrastructure.

Affected Version(s)

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:8.0:*:*:*:*:*:*:*

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:2.2:*:*:*:*:*:*:*

QNX Hypervisor cpe:2.3:a:blackberry:qnx_hypervisor:2.0:*:*:*:*:*:*:*

References

https://support.blackberry.com/pkb/s/article/141343

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.