Riskcovery

CVE-2026-4018

TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety

State
Published
Severity
6.4 Medium
Published
Jul 14, 2026
Updated
Jul 15, 2026
Reserved
Mar 11, 2026

Read the record on cve.org

Description

TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.

Scores

CVSSScoreVectorSource
3.16.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hblackberry

Weaknesses

  • CWE-367 Time-of-check time-of-use (TOCTOU) race condition

Affected Products

ProductVersions
QNX Software Development PlatformBlackBerry Ltd
  • 7.1Affected
  • cpe:2.3:a:blackberry:qnx_software_development_platform:7.1:*:*:*:*:*:*:*Affected
  • 7.0Affected
  • cpe:2.3:a:blackberry:qnx_software_development_platform:7.0:*:*:*:*:*:*:*Affected
QNX OS for SafetyBlackBerry Ltd
  • 2.2.8 and earlierAffected
  • cpe:2.3:o:blackberry:qnx_os_for_safety:2.2:8:*:*:*:*:*:*Affected
  • 2.1.5 and earlierAffected
  • cpe:2.3:o:blackberry:qnx_os_for_safety:2.1:5:*:*:*:*:*:*Affected
  • 2.0.3 and earlierAffected
  • cpe:2.3:o:blackberry:qnx_os_for_safety:2.0:3:*:*:*:*:*:*Affected
QNX OS for MedicalBlackBerry Ltd.
  • 2.0.2 and earlierAffected
  • cpe:2.3:o:blackberry:qnx_os_for_medical:2.0:2:*:*:*:*:*:*Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.