CVE-2025-53788 — Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft Windows Subsystem FOR Linux

CWE-367 — Time-of-check Time-of-use (TOCTOU) Race Condition4 documents4 sources
Severity
7.0HIGHNVD
EPSS
0.0%
top 87.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Windows Subsystem FOR LinuxMsrc Windows Subsystem FOR Linux
Timeline
PublishedAug 12

Description

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5microsoft/windows_subsystem_for_linux5.0.0.0 — 2.5.10

🔴Vulnerability Details

1
GHSA
GHSA-jhqq-6r83-8cpg: Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally↗2025-08-12
▶

📋Vendor Advisories

1
Microsoft
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability↗2025-08-12
▶

🕵️Threat Intelligence

1
Bleepingcomputer
Microsoft August 2025 Patch Tuesday fixes one zero-day, 107 flaws↗2025-08-12
▶