# CWE-667. Every Advisory and CVE whose sources give the weakness CWE-667, newest first. ## Records, newest first - [Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation](https://agentprime.io/advisories/CVE-2026-118052.md) `CVE-2026-118052` · CVE record: Eclipse Foundation Eclipse ThreadX · CVSS 6.8 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Denial of service, CWE-667 - [VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth](https://agentprime.io/advisories/CVE-2026-61854.md) `CVE-2026-61854` · CVE record: jackh54 VoiceSentinel · CVSS 8.2 High · Not analysed yet · Published 30 Oct 2026 · Tags: Race condition, Denial of service, CWE-667 - [Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)](https://agentprime.io/advisories/CVE-2026-118593.md) `CVE-2026-118593` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-667 - [Fortinet FortiOS: A improper locking vulnerability in Fortinet FortiOS 8.0.0…](https://agentprime.io/advisories/CVE-2026-106174.md) `CVE-2026-106174` · CVE record: Fortinet FortiOS · CVSS 6.7 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-667 - [filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break](https://agentprime.io/advisories/GHSA-567q-5qvw-pf92.md) `GHSA-567q-5qvw-pf92`, `CVE-2026-112907` · PyPI `filelock`: affected `>=3.22.0, <4.2.1`, fixed in `4.2.1` · CVSS 2.5 Low · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-667 - [Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8](https://agentprime.io/advisories/CVE-2026-110803.md) `CVE-2026-110803` · CVE record: vaadin framework · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service, CWE-667 - [DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock](https://agentprime.io/advisories/CVE-2026-111879.md) `CVE-2026-111879` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-667 - [IBM i is Affected by a Denial of Service in Digital Certificate Manager](https://agentprime.io/advisories/CVE-2026-107674.md) `CVE-2026-107674` · CVE record: IBM i · CVSS 5.1 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-667 - [Gitea trusted workflow cancellation by unapproved fork runs](https://agentprime.io/advisories/CVE-2026-103670.md) `CVE-2026-103670` · CVE record: Gitea Gitea · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-667 - [Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock](https://agentprime.io/advisories/CVE-2026-105113.md) `CVE-2026-105113` · CVE record: nezhahq nezha · CVSS 7.1 High · Not analysed yet · Published 3 Oct 2026 · Tags: CWE-667 - [NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking.](https://agentprime.io/advisories/CVE-2026-47581.md) `CVE-2026-47581` · CVE record: NVIDIA GeForce and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-667 - [Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB](https://agentprime.io/advisories/CVE-2026-96273.md) `CVE-2026-96273` · CVE record: NationalSecurityAgency ghidra · CVSS 6.8 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-460, CWE-667 - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-56914.md) `CVE-2026-56914` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption, CWE-667 - [Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability.](https://agentprime.io/advisories/CVE-2026-80126.md) `CVE-2026-80126` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-667 - [OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access](https://agentprime.io/advisories/GHSA-42cj-99w8-cp2p.md) `GHSA-42cj-99w8-cp2p`, `CVE-2026-45404`, `GO-2026-6258` · Go `go.opentelemetry.io/otel/bridge/opentracing`: affected `>=0.11.0, <1.45.0`, fixed in `1.45.0` · CVSS 5.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Race condition, CWE-667 - [dm-integrity: fix a bug if the bio is out of limits](https://agentprime.io/advisories/CVE-2026-72100.md) `CVE-2026-72100` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 15 Aug 2026 · Tags: CWE-667 - [tracing/osnoise: Call synchronize_rcu() when unregistering](https://agentprime.io/advisories/CVE-2026-72012.md) `CVE-2026-72012` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2026 · Tags: CWE-667 - [Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled](https://agentprime.io/advisories/CVE-2026-68085.md) `CVE-2026-68085` · CVE record: Linux Linux · CVSS 8.0 High · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-667 - [sysctl and platform-op locks open to abuse](https://agentprime.io/advisories/CVE-2026-62426.md) `CVE-2026-62426` · CVE record: Xen Xen · CVSS 8.8 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-412, CWE-667 - [nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path](https://agentprime.io/advisories/CVE-2026-64534.md) `CVE-2026-64534` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-667 - [block: recompute nr_integrity_segments in blk_insert_cloned_request](https://agentprime.io/advisories/CVE-2026-64232.md) `CVE-2026-64232` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-667 - [Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp](https://agentprime.io/advisories/CVE-2026-63975.md) `CVE-2026-63975` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 19 Jul 2026 · Tags: CWE-667 - [drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()](https://agentprime.io/advisories/CVE-2026-63863.md) `CVE-2026-63863` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 19 Jul 2026 · Tags: CWE-667 - [Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption](https://agentprime.io/advisories/GHSA-6wx8-w4f5-wwcr.md) `GHSA-6wx8-w4f5-wwcr`, `CVE-2026-54906` · RubyGems `concurrent-ruby`: affected `<1.3.7`, fixed in `1.3.7` · CVSS 2.1 Low · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-414, CWE-667 - [domctl lock open to abuse](https://agentprime.io/advisories/CVE-2026-42490.md) `CVE-2026-42490` · CVE record: Xen Xen · CVSS 6.5 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-667 - [domctl lock open to abuse](https://agentprime.io/advisories/CVE-2026-42489.md) `CVE-2026-42489` · CVE record: Xen Xen · CVSS 5.3 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-667 - [nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free](https://agentprime.io/advisories/CVE-2026-46304.md) `CVE-2026-46304` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-667 - [wifi: ath12k: do WoW offloads only on primary link](https://agentprime.io/advisories/CVE-2026-46271.md) `CVE-2026-46271` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-667 - [dm-thin: fix metadata refcount underflow](https://agentprime.io/advisories/CVE-2026-46107.md) `CVE-2026-46107` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-667 - [NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks.](https://agentprime.io/advisories/CVE-2026-24182.md) `CVE-2026-24182` · CVE record: NVIDIA GeForce and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 26 May 2026 · Tags: CWE-667 - [xprtrdma: Decrement re_receiving on the early exit paths](https://agentprime.io/advisories/CVE-2026-43469.md) `CVE-2026-43469` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 8 May 2026 · Tags: CWE-667 - [PCI: Fix pci_slot_trylock() error handling](https://agentprime.io/advisories/CVE-2026-43211.md) `CVE-2026-43211` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-667 - [nvmet: move async event work off nvmet-wq](https://agentprime.io/advisories/CVE-2026-31557.md) `CVE-2026-31557` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-667 - [Spring MVC and WebFlux has Server Sent Event stream corruption](https://agentprime.io/advisories/GHSA-6hcq-hmm3-jj3c.md) `GHSA-6hcq-hmm3-jj3c`, `CVE-2026-22735` · Maven `org.springframework:spring-webflux` and 1 more: affected `>=7.0.0-M1, <7.0.6 || >=6.2.0, <6.2.17 || >=6.0.0, <=6.1.21 || >=5.3.0, <=5.3.39`, fixed in `7.0.6`, `6.2.17` · CVSS 2.6 Low · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-667 - [Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20065.md) `CVE-2026-20065` · CVE record: Cisco Cisco Secure Firewall Threat Defense (FTD) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-667 - [Gallagher Command Centre Server: Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a…](https://agentprime.io/advisories/CVE-2026-20757.md) `CVE-2026-20757` · CVE record: Gallagher Command Centre Server · CVSS 2.5 Low · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-667 - [libceph: reset sparse-read state in osd_fault()](https://agentprime.io/advisories/CVE-2026-23136.md) `CVE-2026-23136` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2026 · Tags: CWE-667 - [Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted](https://agentprime.io/advisories/GHSA-jw2v-cq5x-q68g.md) `GHSA-jw2v-cq5x-q68g`, `CVE-2025-69198`, `PKSA-hm8z-9vp5-kfyz` · Packagist `pterodactyl/panel`: affected `<1.12.0`, fixed in `1.12.0` · CVSS 6.0 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: Race condition, Denial of service, CWE-413, CWE-667 - [Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash](https://agentprime.io/advisories/CVE-2026-21914.md) `CVE-2026-21914` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-667 - [smc91x: fix broken irq-context in PREEMPT_RT](https://agentprime.io/advisories/CVE-2025-71132.md) `CVE-2025-71132` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-667 - [bnxt_en: Fix XDP_TX path](https://agentprime.io/advisories/CVE-2025-68770.md) `CVE-2025-68770` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-667 - [espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path](https://agentprime.io/advisories/CVE-2025-68657.md) `CVE-2025-68657` · CVE record: espressif esp-usb · CVSS 6.4 Medium · Not analysed yet · Published 12 Jan 2026 · Tags: Memory corruption, CWE-667 - [ZwiiCMS < 13.7.00 Lock Persistence Authenticated DoS Against Administrative Pages](https://agentprime.io/advisories/CVE-2025-34467.md) `CVE-2025-34467` · CVE record: fredtempez ZwiiCMS · CVSS 5.3 Medium · Not analysed yet · Published 31 Dec 2025 · Tags: Broken access control, CWE-667 - [A memory corruption issue was addressed with improved lock state checking.](https://agentprime.io/advisories/CVE-2025-43510.md) `CVE-2025-43510` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 12 Dec 2025 · Tags: CWE-667 - [Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server](https://agentprime.io/advisories/CVE-2025-14345.md) `CVE-2025-14345` · CVE record: MongoDB Inc. MongoDB Server · CVSS 2.3 Low · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-667 - [In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking.](https://agentprime.io/advisories/CVE-2025-48618.md) `CVE-2025-48618` · CVE record: Google Android · CVSS 6.6 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-667 - [An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service ...](https://agentprime.io/advisories/PYSEC-2025-210.md) `PYSEC-2025-210`, `BIT-pytorch-2025-63396`, `CVE-2025-63396` · PyPI `torch`: affected , no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 12 Nov 2025 · Tags: CWE-667 - [Malicious TCP/IP thread locking leads into diverse malfunctions](https://agentprime.io/advisories/CVE-2025-10151.md) `CVE-2025-10151` · CVE record: Softing Industrial Automation GmbH smartLink HW-PN and 1 more · CVSS 7.2 High · Not analysed yet · Published 28 Oct 2025 · Tags: CWE-667 - [BIG-IP HSB vulnerability](https://agentprime.io/advisories/CVE-2025-58153.md) `CVE-2025-58153` · CVE record: F5 BIG-IP · CVSS 8.2 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-667 - [net: phy: transfer phy_config_inband() locking responsibility to phylink](https://agentprime.io/advisories/CVE-2025-39915.md) `CVE-2025-39915` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 1 Oct 2025 · Tags: CWE-667 - [mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()](https://agentprime.io/advisories/CVE-2025-39910.md) `CVE-2025-39910` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 1 Oct 2025 · Tags: CWE-667 - [btrfs: fix subvolume deletion lockup caused by inodes xarray race](https://agentprime.io/advisories/CVE-2025-39884.md) `CVE-2025-39884` · CVE record: Linux Linux · CVSS 4.7 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-667 - [padata: Always leave BHs disabled when running ->parallel()](https://agentprime.io/advisories/CVE-2022-50382.md) `CVE-2022-50382` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 18 Sept 2025 · Tags: CWE-667 - [btrfs: fix deadlock when aborting transaction during relocation with scrub](https://agentprime.io/advisories/CVE-2023-53348.md) `CVE-2023-53348` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: CWE-667 - [led: qcom-lpg: Fix sleeping in atomic](https://agentprime.io/advisories/CVE-2022-50371.md) `CVE-2022-50371` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: CWE-667 - [net/mlx5: Fix lockdep assertion on sync reset unload event](https://agentprime.io/advisories/CVE-2025-39832.md) `CVE-2025-39832` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-667 - [drivers: staging: rtl8723bs: Fix locking in \_rtw_join_timeout_handler()](https://agentprime.io/advisories/CVE-2023-53281.md) `CVE-2023-53281` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-667 - [net/smc: fix deadlock triggered by cancel_delayed_work_syn()](https://agentprime.io/advisories/CVE-2023-53233.md) `CVE-2023-53233` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-667 - [Intel(R) TDX Module firmware: Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a…](https://agentprime.io/advisories/CVE-2025-20044.md) `CVE-2025-20044` · CVE record: Intel(R) TDX Module firmware · CVSS 5.6 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-667 - [DoS in Zigbee device due to heavy traffic](https://agentprime.io/advisories/CVE-2025-1221.md) `CVE-2025-1221` · CVE record: silabs.com Zigbee · CVSS 5.9 Medium · Not analysed yet · Published 30 Jul 2025 · Tags: CWE-667 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .