ALPINE-CVE-2026-114155: Race Condition
Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet10-runtimeto a version that resolves this vulnerability.Fixed in 10.0.15-r0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the Alpine .NET 10 runtime are potentially exposed. Exploitation requires an authorized local attacker, so remotely unauthenticated attackers are not described as able to trigger it.
What conditions are required for exploitation?
The attacker needs local access with existing privileges and must win a time-of-check time-of-use race. User interaction is also required according to the provided attack vector.
What is the potential impact if exploitation succeeds?
A successful attacker may elevate privileges locally. The reported impact includes high confidentiality, integrity, and availability effects, with a scope change.