CWE-667 · Improper Locking (page 5)
Page 5 of 8 — CVEs classified under CWE-667, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-47622 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Fix a deadlock in the error handler The following deadlock has been observed o… |
CVE-2024-40981 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bypass empty buckets in batadv_purge_orig_ref() Many syzbot reports are point… |
CVE-2024-40980 | High | 7.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: replace spin_lock by raw_spin_lock trace_drop_common() is called with preem… |
CVE-2024-40977 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery During chip recovery (… |
CVE-2024-40972 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4_xattr_set_entry() creates new EA inod… |
CVE-2024-40969 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: f2fs: don't set RO when shutting down f2fs Shutdown does not check the error of thaw_supe… |
CVE-2024-40967 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: serial: imx: Introduce timeout when waiting on transmitter empty By waiting at most 1 sec… |
CVE-2024-40965 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: i2c: lpi2c: Avoid calling clk_get_rate during transfer Instead of repeatedly calling clk_… |
CVE-2024-40922 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't lock while !TASK_RUNNING There is a report of io_rsrc_ref_quiesce()… |
CVE-2024-40915 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context __kernel_map_pages… |
CVE-2024-40912 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() The ieee80211_sta_ps_de… |
CVE-2024-39476 | Medium | 5.5 | 2024-07-05 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING Xiao r… |
CVE-2024-39468 | High | 7.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling… |
CVE-2024-38664 | High | 7.8 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dpsub: Always register bridge We must always register the DRM bridge, since z… |
CVE-2024-38780 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from sync_print_obj() Since commit a6aa8fca4d79 ("dma-b… |
CVE-2024-38634 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Lock port->lock when calling uart_handle_cts_change() uart_handle_cts_ch… |
CVE-2023-52884 | Medium | 4.4 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to suspend/resume functions Grab input->mut… |
CVE-2022-48760 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usb_kill_urb by adding memory barriers The syzbot fuzzer has ident… |
CVE-2022-48734 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl st… |
CVE-2022-48731 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid scanning potential huge holes When using devm_request_free_mem_region(… |
CVE-2022-48719 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work syzkall… |
CVE-2021-47603 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: audit: improve robustness of the audit queue handling If the audit daemon were ever to ge… |
CVE-2021-47590 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix deadlock in __mptcp_push_pending() __mptcp_push_pending() may call mptcp_flush… |
CVE-2021-47587 | Critical | 9.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The descriptor list is a sha… |
CVE-2024-38600 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: Fix deadlocks with kctl removals at disconnection In snd_card_disconnect(), we set… |
CVE-2024-38598 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that fo… |
CVE-2024-38597 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: eth: sungem: remove .ndo_poll_controller to avoid deadlocks Erhard reports netpoll warnin… |
CVE-2024-38591 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xa_lock for SRQ table may be required in AEQ… |
CVE-2024-38589 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: netrom: fix possible dead-lock in nr_rt_ioctl() syzbot loves netrom, and found a possible… |
CVE-2024-38582 | Medium | 5.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfs_detach_log_writer() Syzbot has reported a potential h… |
CVE-2024-38557 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Reload only IB representors upon lag disable/enable On lag disable, the bond IB… |
CVE-2024-38553 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: fec: remove .ndo_poll_controller to avoid deadlocks There is a deadlock issue found… |
CVE-2024-36976 | Medium | 5.5 | 2024-06-18 | In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-ctrls: show all owned controls in log_status" This reverts commit 980… |
CVE-2024-32900 | High | 7.8 | 2024-06-13 | In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from hal_cam… |
CVE-2024-36970 | Medium | 5.5 | 2024-06-08 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Use request_module_nowait This appears to work around a deadlock regressio… |
CVE-2024-36961 | High | 7.8 | 2024-06-03 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Fix two locking issues with thermal zone debug With the current thermal… |
CVE-2024-36944 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxl_fence_wait" This reverts commit 07ed11afb68d94eadd4ffc082b… |
CVE-2024-36936 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: efi/unaccepted: touch soft lockup during memory accept Commit 50e782a86c98 ("efi/unaccept… |
CVE-2024-36924 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() lpfc_worker_wake_up() ca… |
CVE-2024-36919 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload The session reso… |
CVE-2024-36882 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm: use memalloc_nofs_save() in page_cache_ra_order() See commit f2c817bed58d ("mm: use m… |
CVE-2021-47494 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix management registrations locking The management registrations locking was b… |
CVE-2021-47468 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: Fix sleeping function called from invalid context The driver can call card->… |
CVE-2021-47437 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: iio: adis16475: fix deadlock on frequency set With commit 39c024b51b560 ("iio: adis16475… |
CVE-2023-52786 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix racy may inline data check in dio write syzbot reports that the following warni… |
CVE-2023-52757 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to… |
CVE-2023-52737 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lock the inode in shared mode before starting fiemap Currently fiemap does not tak… |
CVE-2021-47421 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume In current… |
CVE-2021-47382 | Medium | 4.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix deadlock during failing recovery Commit 0b9902c1fcc5 ("s390/qeth: fix dead… |
CVE-2021-47359 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix soft lockup during fsstress Below traces are observed during fsstress and syste… |
CVE-2021-47350 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fix lockup on kernel exec fault The powerpc kernel is not prepared to handle… |
CVE-2021-47349 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mwifiex: bring down link before deleting interface We can deadlock when rmmod'ing the dri… |
CVE-2021-47317 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf: Fix detecting BPF atomic instructions Commit 91c960b0056672 ("bpf: Rename BP… |
CVE-2021-47271 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler Patch fixes the following crit… |
CVE-2021-47242 | High | 7.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lookup in subflow_error_report() Maxim reported a soft lookup in subflow_… |
CVE-2021-47225 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mac80211: fix deadlock in AP/VLAN handling Syzbot reports that when you have AP_VLAN inte… |
CVE-2024-36003 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ice: fix LAG and VF lock dependency in ice_reset_vf() 9f74a3dfcf83 ("ice: Fix VF Reset pa… |
CVE-2024-35999 | High | 7.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have bee… |
CVE-2024-35998 | High | 7.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result Coverity spotted that… |
CVE-2024-35997 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up The flag I2C_HID_READ_P… |
CVE-2024-35991 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue drain_workqueue() cannot… |
CVE-2024-35990 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: dma: xilinx_dpdma: Fix locking There are several places where either chan->lock or chan->… |
CVE-2024-35971 | High | 7.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang The ks8851_irq() thread… |
CVE-2024-35970 | Medium | 6.3 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Clear stale u->oob_skb. syzkaller started to report deadlock of unix_gc_lock aft… |
CVE-2024-35968 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: pds_core: Fix pdsc_check_pci_health function to use work thread When the driver notices f… |
CVE-2024-35953 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in context_xa ivpu_device->context_xa is locked both in kernel t… |
CVE-2024-35952 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fix soft lockup There is a while-loop in ast_dp_set_on_off() that could lead to … |
CVE-2023-52699 | Medium | 5.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sb_bread() with pointers_lock held syzbot is reporting sleep in atomic c… |
CVE-2024-35914 | High | 7.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix error cleanup path in nfsd_rename() Commit a8b0026847b8 ("rename(): avoid a dea… |
CVE-2024-35895 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using… |
CVE-2024-35892 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() qdisc_tree_reduce_backlog() i… |
CVE-2023-52689 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing mutex lock around get meter levels As scarlett2_meter_ctl_ge… |
CVE-2024-35818 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Define the __io_aw() hook as mmiowb() Commit fb24ea52f78e0d595852e ("drivers… |
CVE-2024-35808 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: md/dm-raid: don't call md_reap_sync_thread() directly Currently md_reap_sync_thread() is… |
CVE-2024-35806 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Always disable interrupts when taking cgr_lock smp_call_function_single… |
CVE-2024-35805 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dm_exception_table_exit There was reported lockup when we exit… |
CVE-2024-35795 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix deadlock while reading mqd from debugfs An errant disk backup on my deskt… |
CVE-2023-52668 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix lock ordering in btrfs_zone_activate() The btrfs CI reported a lockdep… |
CVE-2024-35793 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: debugfs: fix wait/cancellation handling during remove Ben Greear further reports deadlock… |
CVE-2024-35786 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf If VM_BIND is enabled on… |
CVE-2024-35784 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock with fiemap and extent locking While working on the patchset to remov… |
CVE-2024-27435 | High | 7.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix reconnection fail due to reserved tag allocation We found a issue on production… |
CVE-2022-48675 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP… |
CVE-2022-48671 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() syzbot is hitting percpu… |
CVE-2024-27072 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Remove useless locks in usbtv_video_free() Remove locks calls in usbtv_vide… |
CVE-2024-27031 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt The loop inside nf… |
CVE-2024-27021 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devm_led_classdev_register() to… |
CVE-2024-27014 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while disabling aRFS When disabling aRFS under the `priv->sta… |
CVE-2024-27010 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a cl… |
CVE-2024-27005 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access req_list while it's being manipulated The icc_lock mutex was s… |
CVE-2024-27004 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree during disable_unused Doug reported [1] the follo… |
CVE-2024-27003 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree for clk_summary Similar to the previous commit, w… |
CVE-2024-27002 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Do a runtime PM get on controllers during probe mt8183-mfgcfg has a mutual… |
CVE-2024-26999 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: serial/pmac_zilog: Remove flawed mitigation for rx irq flood The mitigation was intended… |
CVE-2024-26987 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled When I did hard… |
CVE-2024-26962 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape Fo… |
CVE-2024-26934 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usb_deauthorize_interface() Among the attribute file callback… |
CVE-2024-26933 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and store callback rou… |
CVE-2022-48634 | Medium | 5.3 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix BUG: sleeping function called from invalid context errors gma_crtc_page_f… |
CVE-2024-32648 | Medium | 5.3 | 2024-04-25 | Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Prior to version 0.3.0, default functions don't respect nonreentrancy keys and th… |