CWE-667.

Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation

• Eclipse Foundation Eclipse ThreadX
• Denial of service
• CWE-667

VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth

• jackh54 VoiceSentinel
• Race condition
• Denial of service

Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-667

Fortinet FortiOS: A improper locking vulnerability in Fortinet FortiOS 8.0.0…

• Fortinet FortiOS
• CWE-667

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

• CWE-667

>=3.22.0, <4.2.1 · fixed in 4.2.1

Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8

• vaadin framework
• Denial of service
• CWE-667

DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock

• CWE-667

IBM i is Affected by a Denial of Service in Digital Certificate Manager

• i
• CWE-667

Gitea trusted workflow cancellation by unapproved fork runs

• Gitea
• CWE-667

Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock

• nezha
• CWE-667

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where a user could cause improper locking.

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• CWE-667

Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB

• NationalSecurityAgency ghidra
• CWE-460
• CWE-667

Use after free in Google Android

• Google Android
• Memory corruption
• CWE-667

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability.

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• CWE-667

OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access

• Race condition
• CWE-667

>=0.11.0, <1.45.0 · fixed in 1.45.0

dm-integrity: fix a bug if the bio is out of limits

• Linux kernel
• CWE-667

tracing/osnoise: Call synchronize_rcu() when unregistering

• Linux kernel
• CWE-667

Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled

• Linux kernel
• CWE-667

sysctl and platform-op locks open to abuse

• Xen
• CWE-412
• CWE-667

nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path

• Linux kernel
• CWE-667

block: recompute nr_integrity_segments in blk_insert_cloned_request

• Linux kernel
• CWE-667

Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp

• Linux kernel
• CWE-667

drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()

• Linux kernel
• CWE-667

Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

• CWE-414
• CWE-667

<1.3.7 · fixed in 1.3.7

domctl lock open to abuse

• Xen
• CWE-667

domctl lock open to abuse

• Xen
• CWE-667

nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free

• Linux kernel
• CWE-667

wifi: ath12k: do WoW offloads only on primary link

• Linux kernel
• CWE-667

dm-thin: fix metadata refcount underflow

• Linux kernel
• CWE-667

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks.

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• CWE-667

xprtrdma: Decrement re_receiving on the early exit paths

• Linux kernel
• CWE-667

PCI: Fix pci_slot_trylock() error handling

• Linux kernel
• CWE-667

nvmet: move async event work off nvmet-wq

• Linux kernel
• CWE-667

Spring MVC and WebFlux has Server Sent Event stream corruption

• CWE-667

>=7.0.0-M1, <7.0.6 || >=6.2.0, <6.2.17 || >=6.0.0, <=6.1.21 || >=5.3.0, <=5.3.39 · fixed in 7.0.6, 6.2.17

Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability

• Cisco Secure Firewall Threat Defense (FTD) Software
• Cisco UTD SNORT IPS Engine Software
• CWE-667

Gallagher Command Centre Server: Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a…

• Gallagher Command Centre Server
• CWE-667

libceph: reset sparse-read state in osd_fault()

• Linux kernel
• CWE-667

Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted

• Race condition
• Denial of service

<1.12.0 · fixed in 1.12.0

Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash

• Juniper Networks Junos OS
• CWE-667

smc91x: fix broken irq-context in PREEMPT_RT

• Linux kernel
• CWE-667

bnxt_en: Fix XDP_TX path

• Linux kernel
• CWE-667

espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

• espressif esp-usb
• Memory corruption
• CWE-667

ZwiiCMS < 13.7.00 Lock Persistence Authenticated DoS Against Administrative Pages

• fredtempez ZwiiCMS
• Broken access control
• CWE-667

A memory corruption issue was addressed with improved lock state checking.

• Apple iOS and iPadOS
• Apple macOS
• CWE-667

Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server

• MongoDB Inc. MongoDB Server
• CWE-667

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking.

• Google Android
• CWE-667

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service ...

• CWE-667

· no fixed version yet

Malicious TCP/IP thread locking leads into diverse malfunctions

• Softing Industrial Automation GmbH smartLink HW-PN
• Softing Industrial Automation GmbH smartLink HW-DP
• CWE-667

BIG-IP HSB vulnerability

• F5 BIG-IP
• CWE-667

net: phy: transfer phy_config_inband() locking responsibility to phylink

• Linux kernel
• CWE-667

mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

• Linux kernel
• CWE-667

btrfs: fix subvolume deletion lockup caused by inodes xarray race

• Linux kernel
• CWE-667

padata: Always leave BHs disabled when running ->parallel()

• Linux kernel
• CWE-667

btrfs: fix deadlock when aborting transaction during relocation with scrub

• Linux kernel
• CWE-667

led: qcom-lpg: Fix sleeping in atomic

• Linux kernel
• CWE-667

net/mlx5: Fix lockdep assertion on sync reset unload event

• Linux kernel
• CWE-667

drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()

• Linux kernel
• CWE-667

net/smc: fix deadlock triggered by cancel_delayed_work_syn()

• Linux kernel
• CWE-667

Intel(R) TDX Module firmware: Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a…

• Intel(R) TDX Module firmware
• CWE-667

DoS in Zigbee device due to heavy traffic

• silabs.com Zigbee
• CWE-667