What is GHSA-5g3p-fcx3-v9v3?

GHSA-5g3p-fcx3-v9v3 is a security advisory published by GitHub Security Advisories with Medium severity. Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with...

Which CVE IDs does GHSA-5g3p-fcx3-v9v3 cover?

GHSA-5g3p-fcx3-v9v3 covers the following CVE IDs: CVE-2026-13198. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-5g3p-fcx3-v9v3Medium

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with...

Vendor

GitHub Security Advisories

Published

August 14, 2026

Last Modified

August 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-13198 →

📋 Description

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and event-list state and disclose a small amount of adjacent kernel memory, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests from multiple threads through the piControl character device.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13198
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-13198
https://github.com/advisories/GHSA-5g3p-fcx3-v9v3