Intel

AIKIDO-2024-10226

@cloudflare/workerd-linux-arm64 is vulnerable to Race Condition

Race Condition Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Aug 22, 2024

44

Medium Risk

This Affects:

js@cloudflare/workerd-linux-arm64
1.20221108.0 - 1.20240815.0
Fixed in 1.20240821.0
Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to a race condition due to improper synchronization of shared resources. The fixed version resolves several potential race conditions in security-related code, which could lead to unwanted behavior or errors.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

@cloudflare/workerd-linux-arm64 is vulnerable to Race Condition in versions 1.20221108.0 - 1.20240815.0.

How to fix this

Upgrade the @cloudflare/workerd-linux-arm64 library to the patch version.