Advisories · Weakness
CWE-662.
Every Advisory and CVE whose sources give the weakness CWE-662, newest first.
- CVSS 8.2 High
net/sched: act_ct: preserve tc_skb_cb across defragmentation
- Linux kernel
- CWE-662
- CVSS 7.8 High
wifi: cfg80211: use wiphy work for socket owner autodisconnect
- Linux kernel
- CWE-662
- CVSS 8.4 High
fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
- Linux kernel
- CWE-662
- CVSS 7.1 High
drm/amdgpu: reject mapping a reserved doorbell to a new queue
- Linux kernel
- CWE-662
- CVSS 7.8 High
perf/core: Detach event groups during remove_on_exec
- Linux kernel
- CWE-662
- CVSS 7.5 High
crypto: pcrypt - restore callback for non-parallel fallback
- Linux kernel
- CWE-662
- CVSS 7.8 High
net/smc: Do not re-initialize smc hashtables
- Linux kernel
- CWE-662
- CVSS 8.8 High
wifi: mt76: add wcid publish check in mt76_sta_add
- Linux kernel
- CWE-662
- CVSS 2.3 Low
78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization
- 78 xiaozhi-esp32
- CWE-662
- CVSS 6.3 Medium
AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle
- Weak cryptography or TLS
- Race condition
<0.107.75 · fixed in 0.107.75
GHSA-xgx4-4h9w-53pv · CVE-2026-47703 - CVSS 8.2 High
net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
- Linux kernel
- CWE-662
- CVSS 8.1 High
smb: client: fix in-place encryption corruption in SMB2_write()
- Linux kernel
- CWE-662
- CVSS 4.0, no score published
Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain
- CWE-662
<8.0.0 · fixed in 8.0.0
GHSA-6447-269v-g68m - CVSS 7.8 High
drm/xe: always keep track of remap prev/next
- Linux kernel
- CWE-662
- CVSS 5.9 Medium
Axios HTTP/2 Session Cleanup State Corruption Vulnerability
- Denial of service
- CWE-662
>=1.13.0, <1.13.2 · fixed in 1.13.2
GHSA-qj83-cq47-w5f8 · CVE-2026-39865 - CVSS 7.8 High
net: shaper: protect late read accesses to the hierarchy
- Linux kernel
- CWE-662
- CVSS 7.5 High
OliveTin has unauthenticated DoS via concurrent map writes in OAuth2 state handling
- Race condition
- Denial of service
<0.0.0-20260301235225-f044d90d5525c · fixed in 0.0.0-20260301235225-f044d90d5525c
GHSA-45m3-398w-m2m9 · CVE-2026-28789 - CVSS 9.8 CriticalCritical · CVSS 9+
net/handshake: duplicate handshake cancellations leak socket
- Linux kernel
- CWE-662
- CVSS 1.8 Low
Intel(R) TDX: Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged…
- Intel(R) TDX
- CWE-662
- CVSS 2.3 Low
Vyper has a double eval in For List Iter
- CWE-662
<0.4.1 · fixed in 0.4.1
GHSA-h33q-mhmp-8p67 · CVE-2025-27104 - CVSS 7.5 High
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-662
- CVSS 9.1 CriticalCritical · CVSS 9+
Evmos transaction execution not accounting for all state transition after interaction with precompiles
- CWE-662
<17.0.0 · fixed in 17.0.0
GHSA-3fp5-2xwh-fxm6 · CVE-2024-32644 - CVSS 7.5 High
Grafana Missing Synchronization vulnerability
- CWE-662
- CWE-820
<9.4.12 || >=9.5.0, <9.5.3 · fixed in 9.4.12, 9.5.3
GHSA-x2w4-c67p-g44j · CVE-2023-2801 - CVSS 6.4 Medium
In adsp, there is a possible double free due to a race condition.
- MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797
- CWE-662
- CVSS 6.4 Medium
In gpu, there is a possible use after free due to a race condition.
- MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8365
- CWE-662
- CVSS 6.4 Medium
In display drm, there is a possible memory corruption due to a race condition.
- MediaTek, Inc. MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8365, MT8675
- CWE-662
- CVSS 6.4 Medium
In ccu, there is a possible memory corruption due to a race condition.
- MediaTek, Inc. MT6765, MT6768, MT8786
- CWE-662
- CVSS 6.4 Medium
In ccd, there is a possible use after free due to a race condition.
- MediaTek, Inc. MT6879, MT6895, MT6983
- CWE-662
- CVSS 6.4 Medium
In ccd, there is a possible memory corruption due to a race condition.
- MediaTek, Inc. MT6879, MT6895, MT6983
- CWE-662
- CVSS 6.4 Medium
In disp, there is a possible use after free due to a race condition.
- MediaTek, Inc. MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6789
- CWE-662
- CVSS 6.4 Medium
In vow, there is a possible use after free due to a race condition.
- MediaTek, Inc. MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797
- CWE-662
- CVSS 6.4 Medium
In vcu, there is a possible use after free due to a race condition.
- MediaTek, Inc. MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8185, MT8365, MT8696, MT8768, MT8786, MT8789, MT8791, MT8797, MT8798
- CWE-662
- CVSS 6.4 Medium
In vcu, there is a possible use after free due to a race condition.
- MediaTek, Inc. MT6762, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8185, MT8365, MT8696, MT8768, MT8786, MT8789, MT8791, MT8797, MT8798
- CWE-662
- CVSS 2.6 Low
Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin
- CWE-662
- CWE-820
<=1.1 · no fixed version yet
GHSA-vwx4-frpr-w27j · CVE-2022-25210 - CVSS 5.5 Medium
Deadlock in mutually recursive `tf.function` objects
- CWE-662
- CWE-667
<2.4.4 || >=2.5.0, <2.5.2 || >=2.6.0, <2.6.1 · fixed in 2.4.4, 2.5.2, 2.6.1
GHSA-h67m-xg8f-fxcf · CVE-2021-41213 - CVSS 7.5 High
Improper Synchronization and Race Condition in vm-memory
- Race condition
- CWE-662
<0.1.1 || >=0.2.0, <0.2.1 · fixed in 0.1.1, 0.2.1
GHSA-mm4m-qg48-f7wc · CVE-2020-13759 - CVSS 5.9 Medium
Data race in va-ts
- Memory corruption
- CWE-662
<0.0.4 · fixed in 0.0.4
GHSA-3hj2-hh36-hv9v · CVE-2020-36220 - CVSS 5.9 Medium
Data races in multiqueue2
- CWE-662
<0.1.7 · fixed in 0.1.7
GHSA-jphw-p3m6-pj3c · CVE-2020-36214 - CVSS 7.5 High
Data races in hashconsing
- Memory corruption
- CWE-662
<1.1.0 · fixed in 1.1.0
GHSA-rw2c-c256-3r53 · CVE-2020-36215 - CVSS 5.9 Medium
Data race in eventio
- Memory corruption
- CWE-662
<0.5.1 · fixed in 0.5.1
GHSA-69vj-xx27-g45w · CVE-2020-36216 - CVSS 5.9 Medium
Data race in may_queue
- Memory corruption
- CWE-662
<=0.1.8 · no fixed version yet
GHSA-pphf-f93w-gc84 · CVE-2020-36217 - CVSS 5.9 Medium
Improper synchronization in buttplug
- CWE-662
<1.0.4 · fixed in 1.0.4
GHSA-r7rv-2rph-hvhj · CVE-2020-36218 - CVSS 5.9 Medium
Data race in atomic-option
- CWE-662
<=0.1.2 · no fixed version yet
GHSA-8gf5-q9p9-wvmc · CVE-2020-36219 - CVSS 4.7 Medium
Data races in im
- CWE-662
>=12.0.0, <15.1.0 · fixed in 15.1.0
GHSA-q9h2-4xhf-23xx · CVE-2020-36204 - CVSS 7.0 High
Data races in rusb
- Memory corruption
- CWE-662
<0.7.0 · fixed in 0.7.0
GHSA-9mxw-4856-9cm5 · CVE-2020-36206 - CVSS 7.8 High
Data races in conquer-once
- Memory corruption
- CWE-662
<0.3.2 · fixed in 0.3.2
GHSA-3jc5-5hc5-33gj · CVE-2020-36208 - CVSS 7.0 High
Data races in aovec
- Memory corruption
- CWE-662
<=1.1.0 · no fixed version yet
GHSA-g489-xrw3-3v8w · CVE-2020-36207 - CVSS 7.0 High
Data races in late-static
- CWE-662
<0.4.0 · fixed in 0.4.0
GHSA-wr55-mf5c-hhwm · CVE-2020-36209 - CVSS 7.0 High
Data races in gfwx
- Memory corruption
- CWE-662
<0.3.0 · fixed in 0.3.0
GHSA-xp6v-qx65-4pp7 · CVE-2020-36211 - CVSS 5.5 Medium
Data races in thex
- CWE-662
<=0.1.0 · no fixed version yet
GHSA-j42v-6wpm-r847 · CVE-2020-35927 - CVSS 7.5 High
Wrong memory orderings violates mutual exclusion in spin
- CWE-662
<0.5.2 · fixed in 0.5.2
GHSA-hv7x-f3pv-gpwr · CVE-2019-16137