CVE-2026-57973

Summary

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.

Affected Software

VendorProductVersion RangeStatus
MicrosoftWindows Subsystem for Linux (WSL2)5.0.0.0 < 2.7.10affected

Weaknesses

  • CWE-367: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References