QNX Neutrino vulnerabilities

A TOCTOU race condition in specific trace commands of the TraceEvent() system call allows an attacker with local access and the PROCMGR_AID_TRACE ability to cause information disclosure, data tampering, or a crash of the QNX Neutrino kernel.

A buffer overflow vulnerability in the entry handler of the TraceEvent() system call could allow a local attacker to cause information disclosure, data tampering, or a crash of the QNX Neutrino kernel.

A vulnerability in the SchedGet() system call of the QNX Neutrino kernel is caused by insufficient parameter validation. A local attacker could exploit this flaw to crash the kernel.