A signal handler race condition vulnerability in OpenHarmony versions 5.0.3 through 6.0 poses a significant risk of unauthorized data access and denial of service.

This vulnerability is a signal handler race condition (CWE-364). According to the CVSS vector (PR:L), this flaw requires an authenticated user with low-level privileges to trigger the race condition, potentially leading to information disclosure or system instability.

The vulnerability carries a CVSS score of 8.1, indicating a high level of risk. Successful exploitation could lead to the exposure of sensitive data or the disruption of critical system services, directly impacting the availability and confidentiality of the affected device or environment.

Immediate Action: Update all deployments of OpenHarmony to a version beyond 6.0 as specified in the official vendor disclosure.

Proactive Monitoring: Monitor system logs for unusual process terminations or unexpected signal-related errors that may indicate exploitation attempts.

Compensating Controls: Implement strict access control lists (ACLs) to limit the number of users capable of executing processes that interact with sensitive system signals.

Public Exploit Available: No (exploit_available: unknown)

Given the high severity score, administrators should prioritize patching OpenHarmony systems. Organizations should review their current version footprint and apply the necessary updates provided by the vendor to prevent potential privilege escalation or service interruption.