Threats tagged 'brew-hatch-cve-2026-112935'

A vulnerability in filelock versions 3.22.0 through 4.2.0 allows a local user with write access to a sticky shared directory (e.g., /tmp) to cause two processes of the lock user to simultaneously hold the same soft file lock. This occurs due to inode reuse and a race condition in the stale-lock break logic, which can remove a live lock file incorrectly. The issue impacts integrity by allowing concurrent holders to write protected data without detection, but does not affect confidentiality or availability.