CWE-667 · Improper Locking (page 6)
Page 6 of 8 — CVEs classified under CWE-667, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26925 | High | 7.8 | 2024-04-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex… |
CVE-2024-26916 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: flush any delayed gfxoff on suspend entry" commit ab4750332dbe ("drm/amd… |
CVE-2024-26899 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: block: fix deadlock between bd_link_disk_holder and partition scan 'open_mutex' of gendis… |
CVE-2024-26873 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Fix a deadlock issue related to automatic dump If we issue a disabling PH… |
CVE-2021-47192 | Medium | 5.3 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: sysfs: Fix hang when device state is set via sysfs This fixes a regression ad… |
CVE-2021-47185 | Medium | 4.4 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc When running ltp testcase(ltp… |
CVE-2024-26806 | Medium | 5.5 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks The ->ru… |
CVE-2024-26790 | Medium | 5.5 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read There is chip (ls1028a) e… |
CVE-2024-26781 | Medium | 5.5 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix possible deadlock in subflow diag Syzbot and Eric reported a lockdep splat in… |
CVE-2024-26775 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at set_capacity Move set_capacity() outside of the section… |
CVE-2024-26740 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: use the backlog for mirred ingress The test Davide added in commit… |
CVE-2024-26732 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: implement lockless setsockopt(SO_PEEK_OFF) syzbot reported a lockdep violation [1] i… |
CVE-2024-26725 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix possible deadlock during netlink dump operation Recently, I've been hitting fol… |
CVE-2024-26722 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() There is a path in rt5645_jack_de… |
CVE-2024-26719 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nouveau: offload fence uevents work to workqueue This should break the deadlock between t… |
CVE-2024-26696 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() Syzbot reported a hang issue in mig… |
CVE-2024-26691 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix circular locking dependency The rule inside kvm enforces that the vcpu->m… |
CVE-2024-26686 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task… |
CVE-2023-52638 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock The following 3 locks… |
CVE-2024-26679 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without ho… |
CVE-2024-26658 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: bcachefs: grab s_umount only if snapshotting When I was testing mongodb over bcachefs wit… |
CVE-2023-52632 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix lock dependency warning with srcu =======================================… |
CVE-2021-47163 | High | 7.8 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done On some host, a crash could be trigger… |
CVE-2024-26643 | High | 7.8 | 2024-03-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While th… |
CVE-2024-26631 | High | 7.8 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work idev->mc_ifc_count can be writt… |
CVE-2023-52615 | Medium | 5.5 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: hwrng: core - Fix page fault dead lock on mmap-ed hwrng There is a dead-lock in the hwrng… |
CVE-2021-47128 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks Commit 59438b46471a ("… |
CVE-2024-26629 | Medium | 5.5 | 2024-03-13 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix RELEASE_LOCKOWNER The test on so_count in nfsd4_release_lockowner() is nonsense… |
CVE-2024-26614 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C pro… |
CVE-2023-52498 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wide PM code It is reported that in low-… |
CVE-2023-52493 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and write locks for the… |
CVE-2023-52486 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handling If we get a d… |
CVE-2023-52595 | Medium | 5.5 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: restart beacon queue when hardware reset When a hardware reset is triggered… |
CVE-2023-52590 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid touching renamed directory if parent does not change The VFS will not be loc… |
CVE-2023-52587 | Medium | 5.5 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the `priv->lock` while iterating the `priv->mu… |
CVE-2023-52583 | Medium | 5.5 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix deadlock or deadcode of misusing dget() The lock order is incorrect between den… |
CVE-2021-47091 | Medium | 5.5 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: mac80211: fix locking in ieee80211_start_ap error path We need to hold the local->mtx to… |
CVE-2023-52524 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated… |
CVE-2023-52516 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock __dma_entry_… |
CVE-2023-52505 | Medium | 4.7 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers The prot… |
CVE-2021-47067 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: soc/tegra: regulators: Fix locking up when voltage-spread is out of range Fix voltage cou… |
CVE-2021-47055 | High | 7.1 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCK, MEMUNLOCK and OTP… |
CVE-2023-52484 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range When running… |
CVE-2021-47041 | High | 7.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix incorrect locking in state_change sk callback We are not changing anything… |
CVE-2021-47038 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: avoid deadlock between hci_dev->lock and socket lock Commit eab2404ba798 ("Blu… |
CVE-2021-46987 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when cloning inline extents and using qgroups There are a few excepti… |
CVE-2021-46927 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert After commit 5b7… |
CVE-2020-36775 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock Using f2fs_trylock_op() in f2fs_write_compressed_pa… |
CVE-2024-26605 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlock when enabling ASPM A last minute revert in 6.7-final introduced a… |
CVE-2023-52456 | Medium | 5.5 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When using the serial port as RS485 port, the t… |
CVE-2024-0641 | Medium | 5.5 | 2024-01-17 | A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with l… |
CVE-2024-0639 | Medium | 5.5 | 2024-01-17 | A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw all… |
CVE-2023-34320 | Medium | 5.5 | 2023-12-08 | Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of eit… |
CVE-2023-44298 | Low | 3.6 | 2023-12-05 | Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physic… |
CVE-2023-44297 | High | 7.1 | 2023-12-05 | Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physic… |
CVE-2023-3889 | High | 7.8 | 2023-11-07 | A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain acces… |
CVE-2023-3781 | High | 7.8 | 2023-10-11 | there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-44119 | High | 7.5 | 2023-10-11 | Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability. |
CVE-2023-42441 | Medium | 5.3 | 2023-09-18 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Starting in version 0.2.9 and prior to version 0.3.10, locks of the type `@… |
CVE-2023-38505 | High | 7.5 | 2023-07-27 | DietPi-Dashboard is a web dashboard for the operating system DietPi. The dashboard only allows for one TLS handshake to be in process at a given moment. Once a… |
CVE-2023-3750 | Medium | 6.5 | 2023-07-24 | A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of se… |
CVE-2023-33951 | Medium | 6.7 | 2023-07-24 | A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from i… |
CVE-2023-32258 | High | 8.1 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_C… |
CVE-2023-32257 | High | 8.1 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and… |
CVE-2023-2430 | Medium | 5.5 | 2023-07-23 | A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker wi… |
CVE-2023-0160 | Medium | 4.7 | 2023-07-18 | A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system. |
CVE-2023-21400 | Medium | 6.7 | 2023-07-13 | In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in… |
CVE-2023-21189 | High | 7.3 | 2023-06-28 | In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escala… |
CVE-2023-3436 | Low | 3.3 | 2023-06-27 | Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream. |
CVE-2023-21120 | High | 7.8 | 2023-06-15 | In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no a… |
CVE-2023-20746 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20745 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20743 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20737 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20733 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-2612 | Medium | 4.4 | 2023-05-31 | Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situatio… |
CVE-2023-22318 | High | 7.5 | 2023-05-15 | Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5. |
CVE-2023-2269 | Medium | 4.4 | 2023-04-25 | A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Lin… |
CVE-2023-2007 | High | 7.8 | 2023-04-24 | The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An at… |
CVE-2023-21000 | High | 7.8 | 2023-03-24 | In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2023-20939 | High | 7.8 | 2023-02-28 | In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation o… |
CVE-2023-20619 | Medium | 6.7 | 2023-02-06 | In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20618 | Medium | 6.7 | 2023-02-06 | In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20928 | High | 7.8 | 2023-01-26 | In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additiona… |
CVE-2023-22412 | High | 7.5 | 2023-01-13 | An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated… |
CVE-2022-48216 | High | 7.5 | 2023-01-04 | Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds. |
CVE-2021-43395 | Medium | 5.5 | 2022-12-26 | An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS… |
CVE-2022-20566 | High | 7.8 | 2022-12-16 | In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additiona… |
CVE-2022-3996 | High | 7.5 | 2022-12-13 | If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some op… |
CVE-2022-42329 | Medium | 5.5 | 2022-12-07 | Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr… |
CVE-2022-42328 | Medium | 5.5 | 2022-12-07 | Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr… |
CVE-2022-42775 | Medium | 5.5 | 2022-12-06 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. |
CVE-2022-39131 | Medium | 5.5 | 2022-12-06 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. |
CVE-2022-4129 | Medium | 5.5 | 2022-11-28 | A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL point… |
CVE-2022-39358 | Medium | 6.5 | 2022-10-26 | Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, and 1.42.6, it was possible to circumvent locked parameters… |
CVE-2022-38690 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. |
CVE-2022-20422 | High | 7.0 | 2022-10-11 | In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of priv… |
CVE-2022-26473 | Medium | 6.7 | 2022-10-07 | In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2022-26452 | Medium | 6.7 | 2022-10-07 | In isp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-3303 | Medium | 4.7 | 2022-09-27 | A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SND… |