Description
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.
Published: 2026-10-08
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Denial of Service
Action: Patch ASAP
AI Analysis

Impact

IBM Guardium Data Protection 12.2.2 contains a race condition that allows a remote attacker to trigger a denial of service by performing concurrent unsynchronized writes to a shared map. This vulnerability could result in service interruption, potentially impacting data protection monitoring and audit availability.

Affected Systems

The affected product is IBM Guardium Data Protection, version 12.2.2 on Linux platforms. The vendor released a fix in version 12.2.3 that addresses the race condition.

Risk and Exploitability

This issue has a CVSS score of 7.5, indicating a high severity for remote denial of service. The EPSS score is not available, so the current exploitation likelihood for the general population is unknown, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attacker could exploit the race condition via network connections that trigger the concurrent write operations, thereby causing the service to crash or become unresponsive. The weakness is a concurrency bug, classified as CWE-362.

Generated by OpenCVE AI on October 8, 2026 at 22:42 UTC.

Remediation

Vendor Solution

IBM encourages customers to update their systems promptly.  ProductVersions FixIBM Guardium Data Protection12.2.3 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p15004_Edge&includeSupersedes=0&source=fc

OpenCVE Recommended Actions

  • Apply the IBM fix for Guardium Data Protection 12.2.3 via the provided link.
  • Restrict access to the Guardium service from untrusted networks to limit potential DoS attempts until patch is applied.
  • Monitor system performance and logs for abnormal activity indicating concurrent write conflicts.

Generated by OpenCVE AI on October 8, 2026 at 22:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 10 Oct 2026 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 21:45:00 +0000

Type Values Removed Values Added
Description IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.
Title IBM Guardium Data Protection is affected by multiple vulnerabilities
First Time appeared Ibm
Ibm guardium Data Protection
Weaknesses CWE-362
CPEs cpe:2.3:a:ibm:guardium_data_protection:12.2.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm guardium Data Protection
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Ibm Guardium Data Protection
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-09T14:50:07.000Z

Reserved: 2026-09-01T12:05:04.319Z

Link: CVE-2026-84230

cve-icon Vulnrichment

Updated: 2026-10-09T14:43:23.419Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-08T22:17:33.727

Modified: 2026-10-15T00:04:55.853

Link: CVE-2026-84230

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T23:00:14Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')