Dell Display Manager TOCTOU Race Condition Vulnerability Allowing Code Execution

A Time-of-check Time-of-use (TOCTOU) race condition vulnerability has been identified in Dell Display Manager versions prior to 2.3.2.18. This vulnerability allows a low-privileged attacker with local access to potentially exploit the issue, leading to unauthorized code execution and possibly escalating privileges.

Impact

Exploitation of this vulnerability could result in unauthorized code execution and privilege escalation on the affected system.

Remediation

Users can upgrade to Dell Display Manager version 2.3.2.20 or later. The updated version is available through the Dell Display Manager 2.x Drivers & Downloads page.