CVE-2024-36623: 
Docker vulnerability analysis and mitigation

A Race Condition vulnerability (CVE-2024-36623) was discovered in moby v25.0.3, specifically affecting the streamformatter package. The vulnerability was disclosed on November 29, 2024, and impacts the Docker container platform. The issue allows multiple concurrent write operations that can lead to data corruption or application crashes (NVD).

The vulnerability exists in the streamformatter package of moby v25.0.3, where concurrent write operations can occur without proper synchronization. The issue has been assigned a CVSS v3.1 Base Score of 8.1 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. The vulnerability is classified as CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (NVD, CISA-ADP).

The exploitation of this vulnerability can result in data corruption and application crashes. The high severity rating indicates significant potential impact on the integrity and availability of affected systems (NVD).

A fix has been implemented in version v26.0.0-rc1 through a commit that makes the progressOutput concurrency safe by adding mutex synchronization to the underlying io.Writer (GitHub Commit).