CVE-2026-54906— concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-54906
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption
Source: NVD (National Vulnerability Database)
Vulnerability Description
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another thread. A second writer can then enter its critical section while the first writer is still running. Concurrent::ReadWriteLock#release_read_lock also decrements the shared counter even when no read lock is held. Calling it on a fresh lock changes the counter from 0 to -1, after which normal read acquisition raises Concurrent::ResourceLimitError. This is a synchronization correctness issue in the public Concurrent::ReadWriteLock API. This vulnerability is fixed in 1.3.7.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
加锁检查缺失
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ruby-concurrency | concurrent-ruby | < 1.3.7 | - |
II. Public POCs for CVE-2026-54906
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-54906
请登录查看更多情报信息。
Other References for CVE-2026-54906 (1)
Same Patch Batch · ruby-concurrency · 2026-06-24 · 3 CVEs total
| CVE-2026-54904 | concurrent-ruby: `AtomicReference#update` livelocks when the stored value is `Float::NAN` | |
| CVE-2026-54905 | concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without |
IV. Related Vulnerabilities
V. Comments for CVE-2026-54906
No comments yet