Time-of-Check Time-of-Use Race Condition in Linux Kernel by Microsoft
CVE-2026-62840

7HIGH

What is CVE-2026-62840?

A time-of-check time-of-use (TOCTOU) race condition has been identified in the Linux Kernel, enabling an authorized attacker to exploit the vulnerability to elevate privileges locally. This flaw poses a significant security risk as it can potentially allow malicious users to gain escalated access to system resources, compromising the integrity of the affected environments. Administrators are advised to review the vendor's advisory and apply the necessary patches to mitigate any risks associated with this security issue.

Affected Version(s)

Linux 3P (Third Party) Distros 1.0.0 < 7.3

Linux kernel - Microsoft MANA Network Driver -

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.