If service hooks are used for argument filtering, race conditions are possible between argument check and actual sytem call.
vulners.com/securityvulns/securityvulns:doc:23816
vulners.com/securityvulns/securityvulns:doc:5589