CWE-667 · Improper Locking (page 2)
Page 2 of 8 — CVEs classified under CWE-667, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-23157 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages [BUG] The… |
CVE-2026-23130 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dead lock while flushing management frames Commit [1] converted the man… |
CVE-2026-23103 | High | 7.8 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the addrs_lock be per port, not per ipvlan d… |
CVE-2026-20415 | Medium | 5.5 | 2026-02-02 | In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained… |
CVE-2025-71181 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: remove spin_lock() in rust_shrink_free_page() When forward-porting Rust Bind… |
CVE-2025-69198 | Medium | 6.5 | 2026-01-19 | Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total number of resources (e.g. dat… |
CVE-2026-21914 | High | 7.5 | 2026-01-15 | An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Den… |
CVE-2025-71126 | High | 7.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid deadlock on fallback while reinjecting Jakub reported an MPTCP deadlock at f… |
CVE-2025-71117 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs store callbacks Freezing the request queu… |
CVE-2025-71104 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advan… |
CVE-2025-71079 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write A deadlock can… |
CVE-2025-68823 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix deadlock when reading partition table When one process(such as udev) opens ublk… |
CVE-2025-68657 | Medium | 6.4 | 2026-01-12 | Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices. Prior to 1.1.0, calls to hid_host_device_close() can free the same… |
CVE-2025-34467 | Medium | 4.3 | 2025-12-31 | ZwiiCMS versions prior to 13.7.00 contain a denial-of-service vulnerability in multiple administrative endpoints due to improper authorization checks combined… |
CVE-2025-68333 | Medium | 5.5 | 2025-12-22 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix possible deadlock in the deferred_irq_workfn() For PREEMPT_RT=y kernels, t… |
CVE-2025-68223 | Medium | 5.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the attempt to… |
CVE-2025-43510 | High | 7.8 | 2025-12-12 | A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS… |
CVE-2025-14345 | Medium | 4.2 | 2025-12-09 | A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencie… |
CVE-2025-48618 | Medium | 6.8 | 2025-12-08 | In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to p… |
CVE-2025-63396 | Low | 3.3 | 2025-11-12 | An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finaliz… |
CVE-2025-10151 | | 2025-10-28 | Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLin… | |
CVE-2025-58153 | Medium | 5.9 | 2025-10-15 | Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experience a lock… |
CVE-2023-53620 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in status_resync status_resync() will calculate 'curr_resync - recove… |
CVE-2022-50549 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata Following concu… |
CVE-2022-50518 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: parisc: Fix locking in pdc_iodc_print() firmware call Utilize pdc_lock spinlock to protec… |
CVE-2023-53591 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix deadlock in tc route query code Cited commit causes ABBA deadlock[0] when… |
CVE-2023-53590 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop With this refcnt adde… |
CVE-2023-53580 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: core: Help prevent panic during UVC unconfigure Avichal Rakesh reported a ke… |
CVE-2023-53549 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Rework long task execution when adding/deleting entries When adding/del… |
CVE-2023-53519 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting below error when using… |
CVE-2025-39915 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net: phy: transfer phy_config_inband() locking responsibility to phylink Problem descript… |
CVE-2025-39910 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() kasan_populate_vmalloc… |
CVE-2025-39885 | Medium | 5.5 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due t… |
CVE-2025-39884 | Medium | 4.7 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by inodes xarray race There is a race conditi… |
CVE-2025-39843 | Medium | 5.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock re… |
CVE-2022-50382 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: padata: Always leave BHs disabled when running ->parallel() A deadlock can happen when an… |
CVE-2023-53348 | Medium | 5.5 | 2025-09-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when aborting transaction during relocation with scrub Before relocat… |
CVE-2022-50371 | Medium | 5.5 | 2025-09-17 | In the Linux kernel, the following vulnerability has been resolved: led: qcom-lpg: Fix sleeping in atomic lpg_brighness_set() function can sleep, while led's… |
CVE-2025-39832 | Medium | 5.5 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggere… |
CVE-2023-53281 | Medium | 5.5 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() Commit 041879b12d… |
CVE-2023-53233 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix deadlock triggered by cancel_delayed_work_syn() The following LOCKDEP was de… |
CVE-2023-53151 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit for raid1/… |
CVE-2023-53149 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid deadlock in fs reclaim with page writeback Ext4 has a filesystem wide lock pr… |
CVE-2025-39791 | High | 7.8 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: dm: dm-crypt: Do not partially accept write BIOs with zoned targets Read and write operat… |
CVE-2025-39782 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jb… |
CVE-2025-39773 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_int… |
CVE-2025-39769 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix lockdep warning during rmmod The commit under the Fixes tag added a netdev_a… |
CVE-2025-39767 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Optimize module load time by optimizing PLT/GOT counting When enabling CONFIG_… |
CVE-2025-39736 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is ena… |
CVE-2025-39712 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval Getting / Setting t… |
CVE-2025-38720 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: hibmcge: fix rtnl deadlock issue Currently, the hibmcge netdev acquires the rtnl_loc… |
CVE-2025-38711 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is cal… |
CVE-2025-38650 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutex_lock check in hfsplus_free_extents Syzbot reported an issue in hfsp… |
CVE-2025-38643 | High | 8.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() Callers of wdev_chandef(… |
CVE-2025-38551 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during probe() The deadlock appears in a stack tra… |
CVE-2025-38520 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don't call mmput from MMU notifier callback If the process is exiting, the mm… |
CVE-2025-38506 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page memory attributes When running an SEV… |
CVE-2025-20044 | Medium | 4.1 | 2025-08-12 | Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via loca… |
CVE-2025-1221 | | 2025-07-30 | A Zigbee Radio Co-Processor (RCP), which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system (CPCd) due to heavy Zigbee traf… | |
CVE-2025-38491 | High | 8.2 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following… |
CVE-2025-38436 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is… |
CVE-2025-38404 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive… |
CVE-2025-38388 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context The current… |
CVE-2025-38373 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc() is i… |
CVE-2025-38359 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix in_atomic() handling in do_secure_storage_access() Kernel user spaces access… |
CVE-2025-38353 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. GuC upload, the submiss… |
CVE-2025-38335 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT When enabling PREEMPT_RT, the… |
CVE-2025-38311 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid of the crit lock. That frees us from the error pro… |
CVE-2025-38302 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work Bios queued up in t… |
CVE-2025-38276 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix "don't skip locked entries when scanning entries" Commit 6be3e21d25ca ("fs/da… |
CVE-2025-38268 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work A state check was pre… |
CVE-2025-38244 | High | 7.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when reconnecting channels Fix cifs_signal_cifsd_for_… |
CVE-2025-38241 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix softlockup with mTHP swapin Following softlockup can be easily reprod… |
CVE-2025-38150 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: af_packet: move notifier's packet_dev_mc out of rcu critical section Syzkaller reports th… |
CVE-2025-38114 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: e1000: Move cancel_work_sync to avoid deadlock Previously, e1000_down called cancel_work_… |
CVE-2025-38094 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macb_halt_tx. There is a situation where a… |
CVE-2022-50225 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: riscv:uprobe fix SR_SPIE set/clear handling In riscv the process of uprobe going to clear… |
CVE-2022-50174 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: hinic: avoid kernel hung in hinic_get_stats64() When using hinic device as a bond sl… |
CVE-2022-50173 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Fix global state lock backoff We need to grab the lock after the early retu… |
CVE-2022-50166 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: When HCI work queue is drained, only queue chained work The HCI command, event… |
CVE-2022-50149 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential deadlock in __driver_attach In __driver_attach function, There… |
CVE-2022-50116 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix deadlock and link starvation in outgoing data path The current implementa… |
CVE-2022-50053 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling Do not call iavf_close in iavf_reset_task error handling… |
CVE-2022-50045 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pci: Fix get_phb_number() locking The recent change to get_phb_number() causes a… |
CVE-2022-49998 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix locking in rxrpc's sendmsg Fix three bugs in the rxrpc's sendmsg implementatio… |
CVE-2022-49986 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq storvsc_error_wq workqueue sho… |
CVE-2022-49943 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix obscure lockdep violation for udc_mutex A recent commit expanding the sc… |
CVE-2025-38058 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ... or we risk s… |
CVE-2025-49178 | Medium | 5.5 | 2025-06-17 | A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's… |
CVE-2025-37997 | High | 7.8 | 2025-05-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4… |
CVE-2025-37970 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo Prevent st_lsm6dsx_read… |
CVE-2025-37969 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Prevent st_lsm6d… |
CVE-2025-37968 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IRQ function… |
CVE-2025-37967 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This patch introduces the ucsi_con_mutex_lock… |
CVE-2025-37940 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large nu… |
CVE-2025-37907 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix locking order in ivpu_job_submit Fix deadlock in job submission and abort… |
CVE-2025-20047 | Medium | 5.7 | 2025-05-13 | Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to pot… |
CVE-2025-37884 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcu_tasks_trace and event_mutex. Fix the following deadlock: CP… |
CVE-2025-37880 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: um: work around sched_yield not yielding in time-travel mode sched_yield by a userspace m… |
CVE-2025-37868 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix notifier vs folio deadlock User is reporting what smells like notifie… |