CWE-667 · Improper Locking (page 4)
Page 4 of 8 — CVEs classified under CWE-667, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-57946 | Medium | 5.5 | 2025-01-21 | In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen during system suspend Commit 4ce6e2db00de ("virtio-bl… |
CVE-2024-57921 | High | 7.8 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy trim function When running YouTube videos… |
CVE-2025-21634 | Medium | 5.5 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 348… |
CVE-2024-57903 | Medium | 5.5 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: net: restrict SO_REUSEPORT to inet sockets After blamed commit, crypto sockets could acci… |
CVE-2024-57889 | Medium | 5.5 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses… |
CVE-2024-57807 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix for a potential deadlock This fixes a 'possible circular locking… |
CVE-2024-55642 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: block: Prevent potential deadlocks in zone write plug error recovery Zone write plugging… |
CVE-2024-54683 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: netfilter: IDLETIMER: Fix for possible ABBA deadlock Deletion of the last rule referencin… |
CVE-2024-54460 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: iso: Fix circular lock in iso_listen_bis This fixes the circular locking depen… |
CVE-2024-54191 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: iso: Fix circular lock in iso_conn_big_sync This fixes the circular locking de… |
CVE-2024-48876 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: stackdepot: fix stack_depot_save_flags() in NMI context Per documentation, stack_depot_sa… |
CVE-2024-48875 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't take dev_replace rwsem on task already holding it Running fstests btrfs/011… |
CVE-2024-47143 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on radix_lock radix_lock() shouldn't be held while hol… |
CVE-2024-47141 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc->pinmux data When two client of the same gpi… |
CVE-2024-43098 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock A… |
CVE-2024-56744 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason() syzbot reports deadloc… |
CVE-2024-56743 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: nfs_common: must not hold RCU while calling nfsd_file_put_local Move holding the RCU from… |
CVE-2024-56694 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SK_PASS When the stream_verdict progr… |
CVE-2024-56687 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a… |
CVE-2024-56585 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix sleeping in atomic context for PREEMPT_RT Commit bab1c299f3945ffe79 ("Loon… |
CVE-2024-56559 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one oper… |
CVE-2024-56533 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection The USB disconnect callback… |
CVE-2024-56532 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use snd_card_free_when_closed() at disconnection The USB disconnect callbac… |
CVE-2024-56531 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Use snd_card_free_when_closed() at disconnection The USB disconnect callback… |
CVE-2024-53207 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible deadlocks This fixes possible deadlocks like the following… |
CVE-2024-45818 | Medium | 6.5 | 2024-12-19 | The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the (virtual) VGA is in "standard" mode. Locking involved there has an unu… |
CVE-2024-49602 | Medium | 6.5 | 2024-12-09 | Dell PowerScale OneFS Versions 8.2.2.x through 9.8.0.x contain an improper resource unlocking vulnerability. A remote low privileged attacker could potentially… |
CVE-2018-9344 | High | 7.8 | 2024-11-19 | In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with… |
CVE-2024-53086 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL Upon failure… |
CVE-2024-53085 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpm_pm_suspend() first Setting TPM_CHIP_FLAG_SUSPENDED in the end o… |
CVE-2024-53080 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Lock XArray when getting entries for the VM Similar to commit cac075706f29 (… |
CVE-2024-53079 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: mm/thp: fix deferred split unqueue naming and locking Recent changes are putting more pre… |
CVE-2024-53053 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix another deadlock during RTC update If ufshcd_rtc_work calls ufshcd_r… |
CVE-2024-53052 | Medium | 4.4 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write When io_uring starts a wri… |
CVE-2024-53047 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: init: protect sched with rcu_read_lock Enabling CONFIG_PROVE_RCU_LIST with its dep… |
CVE-2024-50294 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborted (e.g. because kaf… |
CVE-2024-50229 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newly created symlinks Syzbot reported that page_syml… |
CVE-2024-50210 | Medium | 5.5 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() If get_clock_desc(… |
CVE-2024-50207 | High | 7.8 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ring_buff… |
CVE-2024-50044 | Low | 3.3 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change rfcomm_sk_state_change… |
CVE-2022-49018 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sleep in atomic at close time Matt reported a splat at msk close time: BU… |
CVE-2024-50006 | Medium | 4.7 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate() Fuzzing reports a possible deadlo… |
CVE-2024-49985 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume In case there… |
CVE-2024-49980 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vrf: revert "vrf: Remove unnecessary RCU-bh critical section" This reverts commit 504fc6f… |
CVE-2024-49976 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Drop interface_lock in stop_kthread() stop_kthread() is the offline cal… |
CVE-2024-49965 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2… |
CVE-2024-49943 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc_submit: add missing locking in wedged_fini Any non-wedged queue can have a zer… |
CVE-2024-47746 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set This may be a typo. The comment… |
CVE-2024-47744 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock Use a dedicated mut… |
CVE-2024-47736 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: erofs: handle overlapped pclusters out of crafted images properly syzbot reported a task… |
CVE-2024-47735 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Fix missuse of spin_lock_… |
CVE-2024-46868 | Medium | 5.5 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() If the __qcuefi pointer is n… |
CVE-2024-46867 | Medium | 5.5 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: fix deadlock in show_meminfo() There is a real deadlock as well as sleepin… |
CVE-2024-46866 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: add missing bo locking in show_meminfo() bo_meminfo() wants to inspect bo… |
CVE-2024-46829 | Medium | 5.5 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: rtmutex: Drop rt_mutex::wait_lock before scheduling rt_mutex_handle_deadlock() is called… |
CVE-2024-46797 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: powerpc/qspinlock: Fix deadlock in MCS queue If an interrupt occurs in queued_spin_lock_s… |
CVE-2024-46791 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open The mcp251x_hw_wake… |
CVE-2024-46750 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positives that the cfg_acc… |
CVE-2024-46733 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve leaks in cow_file_range In the buffered write path, the dirty p… |
CVE-2024-46692 | Medium | 5.5 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Mark get_wq_ctx() as atomic call Currently get_wq_ctx() is wrongly c… |
CVE-2024-46678 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: bonding: change ipsec_lock from spin lock to mutex In the cited commit, bond->ipsec_lock… |
CVE-2024-45029 | Medium | 5.5 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as irq safe On ACPI machines, the tegra i2c module e… |
CVE-2024-45024 | High | 7.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb vs. core-mm PT locking We recently made GUP's common page table w… |
CVE-2024-45019 | High | 7.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout reporter mlx5e_safe_reopen_channels() requir… |
CVE-2024-45003 | Medium | 4.7 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming proces… |
CVE-2024-44995 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix a deadlock problem when config TC during resetting When config TC during t… |
CVE-2024-44957 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfd_wakeup() gets EPOLLHUP, when… |
CVE-2024-44956 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/preempt_fence: enlarge the fence critical section It is really easy to introduce s… |
CVE-2024-44953 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix deadlock during RTC update There is a deadlock when runtime suspend… |
CVE-2024-44951 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel… |
CVE-2021-22530 | High | 8.2 | 2024-08-28 | A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This i… |
CVE-2022-48937 | Low | 3.3 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: io_uring: add a schedule point in io_add_buffers() Looping ~65535 times doing kmalloc() c… |
CVE-2022-48930 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock Remove the flush_workqueue(system_long_wq) call since flushin… |
CVE-2022-48920 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit when using flushoncommit When using the f… |
CVE-2023-52903 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: io_uring: lock overflowing for IOPOLL syzbot reports an issue with overflow filling for I… |
CVE-2024-43872 | High | 7.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup under heavy CEQE load CEQEs are handled in interrupt handler cu… |
CVE-2024-43863 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a deadlock in dma buf fence polling Introduce a version of the fence ops… |
CVE-2024-43862 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net: wan: fsl_qmc_hdlc: Convert carrier_lock spinlock to a mutex The carrier_lock spinloc… |
CVE-2024-43849 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: protect locator_addr with the main mutex If the service locator server is… |
CVE-2024-42315 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential deadlock on __exfat_get_dentry_set When accessing a file with more e… |
CVE-2024-42294 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: block: fix deadlock between sd_remove & sd_release Our test report the following hung tas… |
CVE-2024-42274 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: Revert "ALSA: firewire-lib: operate for period elapse event in process context" Commit 7b… |
CVE-2024-42268 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix missing lock on sync reset reload On sync reset reload work, when remote ho… |
CVE-2024-42253 | High | 7.8 | 2024-08-08 | In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Ensure that `i2c_lock' is held when s… |
CVE-2024-42250 | High | 7.8 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when polling Add missing lock protection in poll… |
CVE-2024-42245 | Medium | 5.5 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: Revert "sched/fair: Make sure to try to detach at least one movable task" This reverts co… |
CVE-2024-42239 | Medium | 5.5 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fail bpf_timer_cancel when callback is being cancelled Given a schedule: timer1 cb … |
CVE-2024-42153 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr When del_timer… |
CVE-2024-42140 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the… |
CVE-2024-42114 | Medium | 4.4 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values syzbot is able to trigger softlo… |
CVE-2024-42090 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl()… |
CVE-2024-42085 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock W… |
CVE-2024-41080 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix possible deadlock in io_register_iowq_max_workers() The io_register_iowq_ma… |
CVE-2024-41063 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: cancel all works upon hci_unregister_dev() syzbot is reporting that… |
CVE-2024-41036 | High | 7.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Fix deadlock with the SPI chip variant When SMP is enabled and spinlocks are… |
CVE-2022-48842 | Medium | 4.7 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 ("ice: Avoid RTNL… |
CVE-2022-48826 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix deadlock on DSI device attach error DSI device attach to DSI host will be do… |
CVE-2022-48810 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path ip[6]mr_free… |
CVE-2022-48800 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: remove deadlock due to throttling failing to make progress A soft lockup bug… |
CVE-2022-48785 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Some time ago 8965779d2c0e ("ipv6… |