Threats tagged 'brew-hatch-cve-2026-112906'

A vulnerability in filelock versions 4.1.0 through 4.2.0 allows a local user to evict a fresh lock file owned by another user by exploiting inode reuse and coarse clock timestamp manipulation on certain filesystems like ext4. This causes two processes of the lock owner to enter a critical section simultaneously, violating lock integrity without affecting confidentiality or availability. The attack requires local access, specific filesystem behavior, and precise timing, making exploitation complex and unreliable.