{"id":"CVE-2026-84230","published":"2026-10-08T22:17:33.727","lastModified":"2026-10-15T00:04:55.853","description":"IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-362"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7288627","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A race condition in IBM Guardium Data Protection 12.2.2 allows remote attackers to cause a denial of service by concurrently writing to a shared map without proper synchronization, potentially leading to system instability or unavailability.","exploitability":"Exploitation is moderately difficult as it requires precise timing and concurrent access to the affected shared map, but does not require authentication or complex payloads.","blast_radius":"If exploited, this vulnerability could impact all database monitoring and protection functions within the Guardium system, potentially causing widespread data protection outages across monitored databases.","remediation":"Upgrade to IBM Guardium Data Protection 12.2.3 or later to address the race condition in shared map handling.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","database","monitoring","race-condition"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:24:34.308Z"}}