Threats tagged 'brew-lexicon-cve-2026-112934'

A vulnerability in filelock versions 4.0.0 through 4.2.0 allows a local user who owns the lock's .rw directory tree to interfere with the SoftReadWriteLock holder refresh mechanism. This can cause the lock user's process to hang when writing to a named pipe (FIFO) or overwrite part of its own private file via a hard link under certain kernel configurations. The issue leads to a denial of service by stalling lock acquisition and heartbeat threads, allowing multiple processes to believe they hold the write lock simultaneously. The vulnerability requires local access and specific filesystem conditions, such as permissive hard-link policies or ownership of the lock directory in a sticky or writable directory. A fix is available in version 3.25.2_5.