# CWE-662.

Every Advisory and CVE whose sources give the weakness CWE-662, newest first.

## Records, newest first

- [net/sched: act_ct: preserve tc_skb_cb across defragmentation](https://agentprime.io/advisories/CVE-2026-72057.md)
  `CVE-2026-72057` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 15 Aug 2026 · Tags: CWE-662
- [wifi: cfg80211: use wiphy work for socket owner autodisconnect](https://agentprime.io/advisories/CVE-2026-68404.md)
  `CVE-2026-68404` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-662
- [fs: preserve ACL_DONT_CACHE state in forget_cached_acl()](https://agentprime.io/advisories/CVE-2026-68149.md)
  `CVE-2026-68149` · CVE record: Linux Linux · CVSS 8.4 High · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-662
- [drm/amdgpu: reject mapping a reserved doorbell to a new queue](https://agentprime.io/advisories/CVE-2026-68103.md)
  `CVE-2026-68103` · CVE record: Linux Linux · CVSS 7.1 High · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-662
- [perf/core: Detach event groups during remove_on_exec](https://agentprime.io/advisories/CVE-2026-64556.md)
  `CVE-2026-64556` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-662
- [crypto: pcrypt - restore callback for non-parallel fallback](https://agentprime.io/advisories/CVE-2026-64312.md)
  `CVE-2026-64312` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 25 Jul 2026 · Tags: CWE-662
- [net/smc: Do not re-initialize smc hashtables](https://agentprime.io/advisories/CVE-2026-64005.md)
  `CVE-2026-64005` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 19 Jul 2026 · Tags: CWE-662
- [wifi: mt76: add wcid publish check in mt76_sta_add](https://agentprime.io/advisories/CVE-2026-63832.md)
  `CVE-2026-63832` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 19 Jul 2026 · Tags: CWE-662
- [78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization](https://agentprime.io/advisories/CVE-2026-13489.md)
  `CVE-2026-13489` · CVE record: 78 xiaozhi-esp32 · CVSS 2.3 Low · Not analysed yet · Published 28 Jun 2026 · Tags: CWE-662
- [AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle](https://agentprime.io/advisories/GHSA-xgx4-4h9w-53pv.md)
  `GHSA-xgx4-4h9w-53pv`, `CVE-2026-47703`, `GO-2026-5756` · Go `github.com/AdguardTeam/AdGuardHome` and 1 more: affected `<0.107.75`, fixed in `0.107.75` · CVSS 6.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS, Race condition, CWE-346, CWE-662
- [net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery](https://agentprime.io/advisories/CVE-2026-43466.md)
  `CVE-2026-43466` · CVE record: Linux Linux · CVSS 8.2 High · Not analysed yet · Published 8 May 2026 · Tags: CWE-662
- [smb: client: fix in-place encryption corruption in SMB2_write()](https://agentprime.io/advisories/CVE-2026-43362.md)
  `CVE-2026-43362` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 8 May 2026 · Tags: CWE-662
- [Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain](https://agentprime.io/advisories/GHSA-6447-269v-g68m.md)
  `GHSA-6447-269v-g68m`, `GO-2026-5165` · Go `github.com/mezo-org/mezod`: affected `<8.0.0`, fixed in `8.0.0` · CVSS 4.0, no score published · Not analysed yet · Published 6 May 2026 · Tags: CWE-662
- [drm/xe: always keep track of remap prev/next](https://agentprime.io/advisories/CVE-2026-31479.md)
  `CVE-2026-31479` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-662
- [Axios HTTP/2 Session Cleanup State Corruption Vulnerability](https://agentprime.io/advisories/GHSA-qj83-cq47-w5f8.md)
  `GHSA-qj83-cq47-w5f8`, `CVE-2026-39865` · npm `axios`: affected `>=1.13.0, <1.13.2`, fixed in `1.13.2` · CVSS 5.9 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Denial of service, CWE-662
- [net: shaper: protect late read accesses to the hierarchy](https://agentprime.io/advisories/CVE-2026-23437.md)
  `CVE-2026-23437` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-662
- [OliveTin has unauthenticated DoS via concurrent map writes in OAuth2 state handling](https://agentprime.io/advisories/GHSA-45m3-398w-m2m9.md)
  `GHSA-45m3-398w-m2m9`, `CVE-2026-28789`, `GO-2026-4586` · Go `github.com/OliveTin/OliveTin`: affected `<0.0.0-20260301235225-f044d90d5525c`, fixed in `0.0.0-20260301235225-f044d90d5525c` · CVSS 7.5 High · Not analysed yet · Published 2 Mar 2026 · Tags: Race condition, Denial of service, CWE-662
- [net/handshake: duplicate handshake cancellations leak socket](https://agentprime.io/advisories/CVE-2025-68775.md)
  `CVE-2025-68775` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-662
- [Intel(R) TDX: Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged…](https://agentprime.io/advisories/CVE-2025-22853.md)
  `CVE-2025-22853` · CVE record: Intel(R) TDX · CVSS 1.8 Low · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-662
- [Vyper has a double eval in For List Iter](https://agentprime.io/advisories/GHSA-h33q-mhmp-8p67.md)
  `GHSA-h33q-mhmp-8p67`, `CVE-2025-27104`, `PYSEC-2025-30` · PyPI `vyper`: affected `<0.4.1`, fixed in `0.4.1` · CVSS 2.3 Low · Not analysed yet · Published 21 Feb 2025 · Tags: CWE-662
- [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md)
  `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662
- [Evmos transaction execution not accounting for all state transition after interaction with precompiles](https://agentprime.io/advisories/GHSA-3fp5-2xwh-fxm6.md)
  `GHSA-3fp5-2xwh-fxm6`, `CVE-2024-32644`, `GO-2024-2715` · Go `github.com/evmos/evmos/v16` and 8 more: affected `<17.0.0`, fixed in `17.0.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-662
- [Grafana Missing Synchronization vulnerability](https://agentprime.io/advisories/GHSA-x2w4-c67p-g44j.md)
  `GHSA-x2w4-c67p-g44j`, `BIT-grafana-2023-2801`, `CVE-2023-2801` · Go `github.com/grafana/grafana`: affected `<9.4.12 || >=9.5.0, <9.5.3`, fixed in `9.4.12`, `9.5.3` · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-662, CWE-820
- [In adsp, there is a possible double free due to a race condition.](https://agentprime.io/advisories/CVE-2023-20625.md)
  `CVE-2023-20625` · CVE record: MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797 · CVSS 6.4 Medium · Not analysed yet · Published 7 Mar 2023 · Tags: CWE-662
- [In gpu, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2023-20611.md)
  `CVE-2023-20611` · CVE record: MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8365 · CVSS 6.4 Medium · Not analysed yet · Published 6 Feb 2023 · Tags: CWE-662
- [In display drm, there is a possible memory corruption due to a race condition.](https://agentprime.io/advisories/CVE-2023-20610.md)
  `CVE-2023-20610` · CVE record: MediaTek, Inc. MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8365, MT8675 · CVSS 6.4 Medium · Not analysed yet · Published 6 Feb 2023 · Tags: CWE-662
- [In ccu, there is a possible memory corruption due to a race condition.](https://agentprime.io/advisories/CVE-2023-20607.md)
  `CVE-2023-20607` · CVE record: MediaTek, Inc. MT6765, MT6768, MT8786 · CVSS 6.4 Medium · Not analysed yet · Published 6 Feb 2023 · Tags: CWE-662
- [In ccd, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2022-32643.md)
  `CVE-2022-32643` · CVE record: MediaTek, Inc. MT6879, MT6895, MT6983 · CVSS 6.4 Medium · Not analysed yet · Published 6 Feb 2023 · Tags: CWE-662
- [In ccd, there is a possible memory corruption due to a race condition.](https://agentprime.io/advisories/CVE-2022-32642.md)
  `CVE-2022-32642` · CVE record: MediaTek, Inc. MT6879, MT6895, MT6983 · CVSS 6.4 Medium · Not analysed yet · Published 6 Feb 2023 · Tags: CWE-662
- [In disp, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2022-32648.md)
  `CVE-2022-32648` · CVE record: MediaTek, Inc. MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6789 · CVSS 6.4 Medium · Not analysed yet · Published 3 Jan 2023 · Tags: CWE-662
- [In vow, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2022-32644.md)
  `CVE-2022-32644` · CVE record: MediaTek, Inc. MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797 · CVSS 6.4 Medium · Not analysed yet · Published 3 Jan 2023 · Tags: CWE-662
- [In vcu, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2022-32610.md)
  `CVE-2022-32610` · CVE record: MediaTek, Inc. MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8185, MT8365, MT8696, MT8768, MT8786, MT8789, MT8791, MT8797, MT8798 · CVSS 6.4 Medium · Not analysed yet · Published 8 Nov 2022 · Tags: CWE-662
- [In vcu, there is a possible use after free due to a race condition.](https://agentprime.io/advisories/CVE-2022-32609.md)
  `CVE-2022-32609` · CVE record: MediaTek, Inc. MT6762, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8185, MT8365, MT8696, MT8768, MT8786, MT8789, MT8791, MT8797, MT8798 · CVSS 6.4 Medium · Not analysed yet · Published 8 Nov 2022 · Tags: CWE-662
- [Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin](https://agentprime.io/advisories/GHSA-vwx4-frpr-w27j.md)
  `GHSA-vwx4-frpr-w27j`, `CVE-2022-25210` · Maven `com.convertigo.jenkins.plugins:convertigo-mobile-platform`: affected `<=1.1`, no fixed version yet · CVSS 2.6 Low · Not analysed yet · Published 16 Feb 2022 · Tags: CWE-662, CWE-820
- [Deadlock in mutually recursive \`tf.function\` objects](https://agentprime.io/advisories/GHSA-h67m-xg8f-fxcf.md)
  `GHSA-h67m-xg8f-fxcf`, `BIT-tensorflow-2021-41213`, `CVE-2021-41213`, `PYSEC-2021-405`, `PYSEC-2021-622`, `PYSEC-2021-820` · PyPI `tensorflow` and 2 more: affected `<2.4.4 || >=2.5.0, <2.5.2 || >=2.6.0, <2.6.1`, fixed in `2.4.4`, `2.5.2`, `2.6.1` · CVSS 5.5 Medium · Not analysed yet · Published 10 Nov 2021 · Tags: CWE-662, CWE-667
- [Improper Synchronization and Race Condition in vm-memory](https://agentprime.io/advisories/GHSA-mm4m-qg48-f7wc.md)
  `GHSA-mm4m-qg48-f7wc`, `CVE-2020-13759`, `RUSTSEC-2020-0157` · crates.io `vm-memory`: affected `<0.1.1 || >=0.2.0, <0.2.1`, fixed in `0.1.1`, `0.2.1` · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2021 · Tags: Race condition, CWE-662
- [Data race in va-ts](https://agentprime.io/advisories/GHSA-3hj2-hh36-hv9v.md)
  `GHSA-3hj2-hh36-hv9v`, `CVE-2020-36220`, `RUSTSEC-2020-0114` · crates.io `va-ts`: affected `<0.0.4`, fixed in `0.0.4` · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662, CWE-667
- [Data races in multiqueue2](https://agentprime.io/advisories/GHSA-jphw-p3m6-pj3c.md)
  `GHSA-jphw-p3m6-pj3c`, `CVE-2020-36214`, `RUSTSEC-2020-0106` · crates.io `multiqueue2`: affected `<0.1.7`, fixed in `0.1.7` · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-662
- [Data races in hashconsing](https://agentprime.io/advisories/GHSA-rw2c-c256-3r53.md)
  `GHSA-rw2c-c256-3r53`, `CVE-2020-36215`, `RUSTSEC-2020-0107` · crates.io `hashconsing`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662
- [Data race in eventio](https://agentprime.io/advisories/GHSA-69vj-xx27-g45w.md)
  `GHSA-69vj-xx27-g45w`, `CVE-2020-36216`, `RUSTSEC-2020-0108` · crates.io `eventio`: affected `<0.5.1`, fixed in `0.5.1` · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662
- [Data race in may_queue](https://agentprime.io/advisories/GHSA-pphf-f93w-gc84.md)
  `GHSA-pphf-f93w-gc84`, `CVE-2020-36217`, `RUSTSEC-2020-0111` · crates.io `may_queue`: affected `<=0.1.8`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662
- [Improper synchronization in buttplug](https://agentprime.io/advisories/GHSA-r7rv-2rph-hvhj.md)
  `GHSA-r7rv-2rph-hvhj`, `CVE-2020-36218`, `RUSTSEC-2020-0112` · crates.io `buttplug`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-662
- [Data race in atomic-option](https://agentprime.io/advisories/GHSA-8gf5-q9p9-wvmc.md)
  `GHSA-8gf5-q9p9-wvmc`, `CVE-2020-36219`, `RUSTSEC-2020-0113` · crates.io `atomic-option`: affected `<=0.1.2`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-662
- [Data races in im](https://agentprime.io/advisories/GHSA-q9h2-4xhf-23xx.md)
  `GHSA-q9h2-4xhf-23xx`, `CVE-2020-36204`, `RUSTSEC-2020-0096` · crates.io `im`: affected `>=12.0.0, <15.1.0`, fixed in `15.1.0` · CVSS 4.7 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-662
- [Data races in rusb](https://agentprime.io/advisories/GHSA-9mxw-4856-9cm5.md)
  `GHSA-9mxw-4856-9cm5`, `CVE-2020-36206`, `RUSTSEC-2020-0098` · crates.io `rusb`: affected `<0.7.0`, fixed in `0.7.0` · CVSS 7.0 High · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662
- [Data races in conquer-once](https://agentprime.io/advisories/GHSA-3jc5-5hc5-33gj.md)
  `GHSA-3jc5-5hc5-33gj`, `CVE-2020-36208`, `RUSTSEC-2020-0101` · crates.io `conquer-once`: affected `<0.3.2`, fixed in `0.3.2` · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662
- [Data races in aovec](https://agentprime.io/advisories/GHSA-g489-xrw3-3v8w.md)
  `GHSA-g489-xrw3-3v8w`, `CVE-2020-36207`, `RUSTSEC-2020-0099` · crates.io `aovec`: affected `<=1.1.0`, no fixed version yet · CVSS 7.0 High · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662
- [Data races in late-static](https://agentprime.io/advisories/GHSA-wr55-mf5c-hhwm.md)
  `GHSA-wr55-mf5c-hhwm`, `CVE-2020-36209`, `RUSTSEC-2020-0102` · crates.io `late-static`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 7.0 High · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-662
- [Data races in gfwx](https://agentprime.io/advisories/GHSA-xp6v-qx65-4pp7.md)
  `GHSA-xp6v-qx65-4pp7`, `CVE-2020-36211`, `RUSTSEC-2020-0104` · crates.io `gfwx`: affected `<0.3.0`, fixed in `0.3.0` · CVSS 7.0 High · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662
- [Data races in thex](https://agentprime.io/advisories/GHSA-j42v-6wpm-r847.md)
  `GHSA-j42v-6wpm-r847`, `CVE-2020-35927`, `RUSTSEC-2020-0090` · crates.io `thex`: affected `<=0.1.0`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-662
- [Wrong memory orderings violates mutual exclusion in spin](https://agentprime.io/advisories/GHSA-hv7x-f3pv-gpwr.md)
  `GHSA-hv7x-f3pv-gpwr`, `CVE-2019-16137`, `RUSTSEC-2019-0013` · crates.io `spin`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-662

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-662>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-662/>. Everything for agents: <https://agentprime.io/llms.txt>.