# CWE-667.

Every Advisory and CVE whose sources give the weakness CWE-667, newest first.

## Records, newest first (an older page)

- [i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock](https://agentprime.io/advisories/CVE-2024-43098.md)
  `CVE-2024-43098` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 11 Jan 2025 · Tags: CWE-667
- [nfs_common: must not hold RCU while calling nfsd_file_put_local](https://agentprime.io/advisories/CVE-2024-56743.md)
  `CVE-2024-56743` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 29 Dec 2024 · Tags: CWE-667
- [usb: musb: Fix hardware lockup on first Rx endpoint request](https://agentprime.io/advisories/CVE-2024-56687.md)
  `CVE-2024-56687` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 28 Dec 2024 · Tags: CWE-667
- [ALSA: usx2y: Use snd_card_free_when_closed() at disconnection](https://agentprime.io/advisories/CVE-2024-56533.md)
  `CVE-2024-56533` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-667
- [ALSA: us122l: Use snd_card_free_when_closed() at disconnection](https://agentprime.io/advisories/CVE-2024-56532.md)
  `CVE-2024-56532` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-667
- [ALSA: caiaq: Use snd_card_free_when_closed() at disconnection](https://agentprime.io/advisories/CVE-2024-56531.md)
  `CVE-2024-56531` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-667
- [Bluetooth: MGMT: Fix possible deadlocks](https://agentprime.io/advisories/CVE-2024-53207.md)
  `CVE-2024-53207` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-667
- [Deadlock in x86 HVM standard VGA handling](https://agentprime.io/advisories/CVE-2024-45818.md)
  `CVE-2024-45818` · CVE record: Xen Xen · CVSS 6.5 Medium · Not analysed yet · Published 19 Dec 2024 · Tags: CWE-667
- [drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL](https://agentprime.io/advisories/CVE-2024-53086.md)
  `CVE-2024-53086` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-667
- [mm/thp: fix deferred split unqueue naming and locking](https://agentprime.io/advisories/CVE-2024-53079.md)
  `CVE-2024-53079` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-667
- [io_uring/rw: fix missing NOWAIT check for O_DIRECT start write](https://agentprime.io/advisories/CVE-2024-53052.md)
  `CVE-2024-53052` · CVE record: Linux Linux · CVSS 4.4 Medium · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-667
- [mptcp: init: protect sched with rcu_read_lock](https://agentprime.io/advisories/CVE-2024-53047.md)
  `CVE-2024-53047` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-667
- [rxrpc: Fix missing locking causing hanging calls](https://agentprime.io/advisories/CVE-2024-50294.md)
  `CVE-2024-50294` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-667
- [nilfs2: fix potential deadlock with newly created symlinks](https://agentprime.io/advisories/CVE-2024-50229.md)
  `CVE-2024-50229` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 9 Nov 2024 · Tags: CWE-667
- [posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()](https://agentprime.io/advisories/CVE-2024-50210.md)
  `CVE-2024-50210` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 8 Nov 2024 · Tags: CWE-667
- [ring-buffer: Fix reader locking when changing the sub buffer order](https://agentprime.io/advisories/CVE-2024-50207.md)
  `CVE-2024-50207` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 8 Nov 2024 · Tags: CWE-667
- [Improper account management vulnerability in NetIQ Advance Authentication](https://agentprime.io/advisories/CVE-2021-22530.md)
  `CVE-2021-22530` · CVE record: OpenText NetIQ Advance Authentication · CVSS 8.2 High · Not analysed yet · Published 28 Aug 2024 · Tags: CWE-667
- [In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking.](https://agentprime.io/advisories/CVE-2024-32900.md)
  `CVE-2024-32900` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-667
- [mptcp: fix soft lookup in subflow_error_report()](https://agentprime.io/advisories/CVE-2021-47242.md)
  `CVE-2021-47242` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 21 May 2024 · Tags: CWE-667
- [cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()](https://agentprime.io/advisories/CVE-2022-48671.md)
  `CVE-2022-48671` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-667
- [vyper default functions don't respect nonreentrancy keys](https://agentprime.io/advisories/GHSA-m2v9-w374-5hj9.md)
  `GHSA-m2v9-w374-5hj9`, `CVE-2024-32648`, `PYSEC-2024-163` · PyPI `vyper`: affected `<0.3.0`, fixed in `0.3.0` · CVSS 5.3 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-667
- [Mali GPU Kernel Driver exposes sensitive data from freed memory](https://agentprime.io/advisories/CVE-2023-3889.md)
  `CVE-2023-3889` · CVE record: Arm Ltd Valhall GPU Kernel Driver · CVSS 7.8 High · Not analysed yet · Published 7 Nov 2023 · Tags: Memory corruption, CWE-667
- [Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2023-44119.md)
  `CVE-2023-44119` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-667
- [Vyper has incorrect re-entrancy lock when key is empty string](https://agentprime.io/advisories/GHSA-3hg2-r75x-g69m.md)
  `GHSA-3hg2-r75x-g69m`, `CVE-2023-42441`, `PYSEC-2023-305` · PyPI `vyper`: affected `>=0.2.9, <0.3.10`, fixed in `0.3.10` · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2023 · Tags: Denial of service, CWE-667
- [Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service](https://agentprime.io/advisories/CVE-2023-3750.md)
  `CVE-2023-3750` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-667
- [In vcu, there is a possible out of bounds write due to improper locking.](https://agentprime.io/advisories/CVE-2023-20746.md)
  `CVE-2023-20746` · CVE record: MediaTek, Inc. MT6789, MT6855, MT8167, MT8168, MT8173, MT8185, MT8195, MT8321, MT8365, MT8395, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-667
- [In vcu, there is a possible out of bounds write due to improper locking.](https://agentprime.io/advisories/CVE-2023-20745.md)
  `CVE-2023-20745` · CVE record: MediaTek, Inc. MT6789, MT6855, MT8185, MT8195, MT8365, MT8395, MT8781, MT8786, MT8789, MT8791, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-667
- [In vcu, there is a possible out of bounds write due to improper locking.](https://agentprime.io/advisories/CVE-2023-20743.md)
  `CVE-2023-20743` · CVE record: MediaTek, Inc. MT6789, MT6855, MT8185, MT8195, MT8365, MT8395, MT8781, MT8786, MT8789, MT8791, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-667
- [In vcu, there is a possible use after free due to improper locking.](https://agentprime.io/advisories/CVE-2023-20737.md)
  `CVE-2023-20737` · CVE record: MediaTek, Inc. MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8365, MT8395 · CVSS 6.7 Medium · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-667
- [In vcu, there is a possible use after free due to improper locking.](https://agentprime.io/advisories/CVE-2023-20733.md)
  `CVE-2023-20733` · CVE record: MediaTek, Inc. MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8365, MT8395 · CVSS 6.7 Medium · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-667
- [shiftfs lock unbalance in Ubuntu-specific kernels](https://agentprime.io/advisories/CVE-2023-2612.md)
  `CVE-2023-2612` · CVE record: Canonical Ltd. ubuntu-linux · CVSS 4.4 Medium · Not analysed yet · Published 30 May 2023 · Tags: CWE-667
- [In MediaCodec.cpp, there is a possible use after free due to improper locking.](https://agentprime.io/advisories/CVE-2023-21000.md)
  `CVE-2023-21000` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-667
- [Android: In multiple functions of looper_backed_event_loop.cpp…](https://agentprime.io/advisories/CVE-2023-20939.md)
  `CVE-2023-20939` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 28 Feb 2023 · Tags: CWE-667
- [In vcu, there is a possible memory corruption due to improper locking.](https://agentprime.io/advisories/CVE-2023-20619.md)
  `CVE-2023-20619` · CVE record: MediaTek, Inc. MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8786, MT8789, MT8791, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 6 Feb 2023 · Tags: CWE-667
- [In vcu, there is a possible memory corruption due to improper locking.](https://agentprime.io/advisories/CVE-2023-20618.md)
  `CVE-2023-20618` · CVE record: MediaTek, Inc. MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8786, MT8789, MT8791, MT8797 · CVSS 6.7 Medium · Not analysed yet · Published 6 Feb 2023 · Tags: CWE-667
- [Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed](https://agentprime.io/advisories/CVE-2023-22412.md)
  `CVE-2023-22412` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-667
- [Uniswap Universal Router Incorrect Authorization vulnerability](https://agentprime.io/advisories/GHSA-7m37-cx35-qgmr.md)
  `GHSA-7m37-cx35-qgmr`, `CVE-2022-48216` · npm `@uniswap/universal-router`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 7.5 High · Not analysed yet · Published 4 Jan 2023 · Tags: Broken access control, CWE-667
- [An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923.](https://agentprime.io/advisories/CVE-2021-43395.md)
  `CVE-2021-43395` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 26 Dec 2022 · Tags: CWE-667
- [Use after free in Android](https://agentprime.io/advisories/CVE-2022-20566.md)
  `CVE-2022-20566` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: Memory corruption, CWE-667
- [Denial of service by double-checked locking in openssl-src](https://agentprime.io/advisories/GHSA-vr8j-hgmm-jh9r.md)
  `GHSA-vr8j-hgmm-jh9r`, `CVE-2022-3996` · crates.io `openssl-src`: affected `>=300.0.0, <300.0.12`, fixed in `300.0.12` · CVSS 7.5 High · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-667
- [Linux kernel: Guests can trigger deadlock in Linux netback driver T\[his CNA information record relates…](https://agentprime.io/advisories/CVE-2022-42329.md)
  `CVE-2022-42329` · CVE record: Linux Linux · CVSS 5.5 Medium · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-667
- [Linux kernel: Guests can trigger deadlock in Linux netback driver T\[his CNA information record relates…](https://agentprime.io/advisories/CVE-2022-42328.md)
  `CVE-2022-42328` · CVE record: Linux Linux · CVSS 6.2 Medium · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-667
- [A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP).](https://agentprime.io/advisories/CVE-2022-4129.md)
  `CVE-2022-4129` · CVE record: Linux kernel (l2tp) · CVSS 5.5 Medium · Not analysed yet · Published 28 Nov 2022 · Tags: CWE-667
- [A race condition flaw was found in the Linux kernel sound subsystem due to improper locking.](https://agentprime.io/advisories/CVE-2022-3303.md)
  `CVE-2022-3303` · CVE record: Linux kernel · CVSS 4.7 Medium · Not analysed yet · Published 27 Sept 2022 · Tags: CWE-667
- [Linux kernel: A race condition was found in the Linux kernel's IP framework for transforming packets…](https://agentprime.io/advisories/CVE-2022-3028.md)
  `CVE-2022-3028` · CVE record: Linux kernel · No CVSS score · Not analysed yet · Published 31 Aug 2022 · Tags: CWE-667
- [A deadlock issue was found in the AHCI controller device of QEMU.](https://agentprime.io/advisories/CVE-2021-3735.md)
  `CVE-2021-3735` · CVE record: QEMU · No CVSS score · Not analysed yet · Published 26 Aug 2022 · Tags: CWE-667
- [kernel: A race condition was found in the Linux kernel's watch queue due to a missing lock in…](https://agentprime.io/advisories/CVE-2022-2959.md)
  `CVE-2022-2959` · CVE record: kernel · No CVSS score · Not analysed yet · Published 25 Aug 2022 · Tags: CWE-667
- [A memory corruption vulnerability was addressed with improved locking.](https://agentprime.io/advisories/CVE-2022-32811.md)
  `CVE-2022-32811` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 24 Aug 2022 · Tags: CWE-667
- [A flaw was found in the libvirt nwfilter driver.](https://agentprime.io/advisories/CVE-2022-0897.md)
  `CVE-2022-0897` · CVE record: libvirt · No CVSS score · Not analysed yet · Published 25 Mar 2022 · Tags: CWE-667
- [A flaw was found in the libvirt libxl driver.](https://agentprime.io/advisories/CVE-2021-4147.md)
  `CVE-2021-4147` · CVE record: libvirt · No CVSS score · Not analysed yet · Published 25 Mar 2022 · Tags: CWE-667
- [kernel: A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux…](https://agentprime.io/advisories/CVE-2021-4149.md)
  `CVE-2021-4149` · CVE record: kernel · No CVSS score · Not analysed yet · Published 23 Mar 2022 · Tags: CWE-667
- [An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt.](https://agentprime.io/advisories/CVE-2021-3667.md)
  `CVE-2021-3667` · CVE record: libvirt · No CVSS score · Not analysed yet · Published 2 Mar 2022 · Tags: CWE-667
- [Improper Locking in JetBrains Kotlin](https://agentprime.io/advisories/GHSA-2qp4-g3q3-f92w.md)
  `GHSA-2qp4-g3q3-f92w`, `CVE-2022-24329` · Maven `org.jetbrains.kotlin:kotlin-stdlib`: affected `<1.6.0`, fixed in `1.6.0` · CVSS 5.3 Medium · Not analysed yet · Published 26 Feb 2022 · Tags: CWE-667, CWE-829
- [gnome-shell: A locking protection bypass flaw was found in some versions of gnome-shell as shipped…](https://agentprime.io/advisories/CVE-2021-20315.md)
  `CVE-2021-20315` · CVE record: gnome-shell · No CVSS score · Not analysed yet · Published 18 Feb 2022 · Tags: CWE-667
- [Intel Chipset firmware: Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware…](https://agentprime.io/advisories/CVE-2021-0147.md)
  `CVE-2021-0147` · CVE record: Intel Chipset firmware · CVSS 4.4 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-667
- [Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed](https://agentprime.io/advisories/CVE-2022-22175.md)
  `CVE-2022-22175` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 19 Jan 2022 · Tags: CWE-667
- [Missing release of locks in PJSIP](https://agentprime.io/advisories/CVE-2021-41141.md)
  `CVE-2021-41141` · CVE record: pjsip pjproject · CVSS 5.9 Medium · Not analysed yet · Published 4 Jan 2022 · Tags: CWE-667
- [Deadlock in mutually recursive \`tf.function\` objects](https://agentprime.io/advisories/GHSA-h67m-xg8f-fxcf.md)
  `GHSA-h67m-xg8f-fxcf`, `BIT-tensorflow-2021-41213`, `CVE-2021-41213`, `PYSEC-2021-405`, `PYSEC-2021-622`, `PYSEC-2021-820` · PyPI `tensorflow` and 2 more: affected `<2.4.4 || >=2.5.0, <2.5.2 || >=2.6.0, <2.6.1`, fixed in `2.4.4`, `2.5.2`, `2.6.1` · CVSS 5.5 Medium · Not analysed yet · Published 10 Nov 2021 · Tags: CWE-662, CWE-667
- [Data race in va-ts](https://agentprime.io/advisories/GHSA-3hj2-hh36-hv9v.md)
  `GHSA-3hj2-hh36-hv9v`, `CVE-2020-36220`, `RUSTSEC-2020-0114` · crates.io `va-ts`: affected `<0.0.4`, fixed in `0.0.4` · CVSS 5.9 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-662, CWE-667
- [Denial of service via deadlock in github.com/containers/storage](https://agentprime.io/advisories/GHSA-7qw8-847f-pggm.md)
  `GHSA-7qw8-847f-pggm`, `CVE-2021-20291`, `GO-2021-0100` · Go `github.com/containers/storage`: affected `<1.28.1`, fixed in `1.28.1` · No CVSS score · Not analysed yet · Published 28 Jul 2021 · Tags: CWE-667

Newest: <https://agentprime.io/advisories/tag/cwe-667.md>
Older: <https://agentprime.io/advisories/tag/cwe-667.md?cursor=WyIyMDIxLTA3LTI4VDE4OjA4OjA1LjAwMDAwMFoiLCJHSFNBLTdxdzgtODQ3Zi1wZ2dtIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-667&cursor=WyIyMDI1LTAxLTExVDEyOjI1OjEyLjM5OTAwMFoiLCJDVkUtMjAyNC00NzE0MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-667/?cursor=WyIyMDI1LTAxLTExVDEyOjI1OjEyLjM5OTAwMFoiLCJDVkUtMjAyNC00NzE0MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.