Advisories · Weakness
CWE-667.
Every Advisory and CVE whose sources give the weakness CWE-667, newest first.
- CVSS 5.5 Medium
i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
nfs_common: must not hold RCU while calling nfsd_file_put_local
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
usb: musb: Fix hardware lockup on first Rx endpoint request
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
ALSA: us122l: Use snd_card_free_when_closed() at disconnection
- Linux kernel
- CWE-667
- CVSS 7.8 High
ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
- Linux kernel
- CWE-667
- CVSS 7.8 High
Bluetooth: MGMT: Fix possible deadlocks
- Linux kernel
- CWE-667
- CVSS 6.5 Medium
Deadlock in x86 HVM standard VGA handling
- Xen
- CWE-667
- CVSS 5.5 Medium
drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
- Linux kernel
- CWE-667
- CVSS 7.8 High
mm/thp: fix deferred split unqueue naming and locking
- Linux kernel
- CWE-667
- CVSS 4.4 Medium
io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
mptcp: init: protect sched with rcu_read_lock
- Linux kernel
- CWE-667
- CVSS 7.8 High
rxrpc: Fix missing locking causing hanging calls
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
nilfs2: fix potential deadlock with newly created symlinks
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- Linux kernel
- CWE-667
- CVSS 7.8 High
ring-buffer: Fix reader locking when changing the sub buffer order
- Linux kernel
- CWE-667
- CVSS 8.2 High
Improper account management vulnerability in NetIQ Advance Authentication
- OpenText NetIQ Advance Authentication
- CWE-667
- CVSS 9.8 CriticalCritical · CVSS 9+
In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking.
- Google Android
- CWE-667
- CVSS 7.5 High
mptcp: fix soft lookup in subflow_error_report()
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- Linux kernel
- CWE-667
- CVSS 5.3 Medium
vyper default functions don't respect nonreentrancy keys
- CWE-667
<0.3.0 · fixed in 0.3.0
GHSA-m2v9-w374-5hj9 · CVE-2024-32648 - CVSS 7.8 High
Mali GPU Kernel Driver exposes sensitive data from freed memory
- Arm Ltd Valhall GPU Kernel Driver
- Memory corruption
- CWE-667
-
Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-667
- CVSS 5.3 Medium
Vyper has incorrect re-entrancy lock when key is empty string
- Denial of service
- CWE-667
>=0.2.9, <0.3.10 · fixed in 0.3.10
GHSA-3hg2-r75x-g69m · CVE-2023-42441 - CVSS 6.5 Medium
Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 6
- CWE-667
- CVSS 6.7 Medium
In vcu, there is a possible out of bounds write due to improper locking.
- MediaTek, Inc. MT6789, MT6855, MT8167, MT8168, MT8173, MT8185, MT8195, MT8321, MT8365, MT8395, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
- CWE-667
- CVSS 6.7 Medium
In vcu, there is a possible out of bounds write due to improper locking.
- MediaTek, Inc. MT6789, MT6855, MT8185, MT8195, MT8365, MT8395, MT8781, MT8786, MT8789, MT8791, MT8797
- CWE-667
- CVSS 6.7 Medium
In vcu, there is a possible out of bounds write due to improper locking.
- MediaTek, Inc. MT6789, MT6855, MT8185, MT8195, MT8365, MT8395, MT8781, MT8786, MT8789, MT8791, MT8797
- CWE-667
- CVSS 6.7 Medium
In vcu, there is a possible use after free due to improper locking.
- MediaTek, Inc. MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8365, MT8395
- CWE-667
- CVSS 6.7 Medium
In vcu, there is a possible use after free due to improper locking.
- MediaTek, Inc. MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8365, MT8395
- CWE-667
- CVSS 4.4 Medium
shiftfs lock unbalance in Ubuntu-specific kernels
- Canonical Ltd. ubuntu-linux
- CWE-667
- CVSS 7.8 High
In MediaCodec.cpp, there is a possible use after free due to improper locking.
- Android
- CWE-667
- CVSS 7.8 High
Android: In multiple functions of looper_backed_event_loop.cpp…
- Android
- CWE-667
- CVSS 6.7 Medium
In vcu, there is a possible memory corruption due to improper locking.
- MediaTek, Inc. MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8786, MT8789, MT8791, MT8797
- CWE-667
- CVSS 6.7 Medium
In vcu, there is a possible memory corruption due to improper locking.
- MediaTek, Inc. MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8786, MT8789, MT8791, MT8797
- CWE-667
- CVSS 7.5 High
Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed
- Juniper Networks Junos OS
- CWE-667
- CVSS 7.5 High
Uniswap Universal Router Incorrect Authorization vulnerability
- Broken access control
- CWE-667
<1.1.0 · fixed in 1.1.0
GHSA-7m37-cx35-qgmr · CVE-2022-48216 - CVSS 5.5 Medium
An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923.
- CWE-667
- CVSS 7.8 High
Use after free in Android
- Android
- Memory corruption
- CWE-667
- CVSS 7.5 High
Denial of service by double-checked locking in openssl-src
- CWE-667
>=300.0.0, <300.0.12 · fixed in 300.0.12
GHSA-vr8j-hgmm-jh9r · CVE-2022-3996 - CVSS 5.5 Medium
Linux kernel: Guests can trigger deadlock in Linux netback driver T[his CNA information record relates…
- Linux kernel
- CWE-667
- CVSS 6.2 Medium
Linux kernel: Guests can trigger deadlock in Linux netback driver T[his CNA information record relates…
- Linux kernel
- CWE-667
- CVSS 5.5 Medium
A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP).
- Linux kernel (l2tp)
- CWE-667
- CVSS 4.7 Medium
A race condition flaw was found in the Linux kernel sound subsystem due to improper locking.
- Linux kernel
- CWE-667
-
Linux kernel: A race condition was found in the Linux kernel's IP framework for transforming packets…
- Linux kernel
- CWE-667
-
A deadlock issue was found in the AHCI controller device of QEMU.
- QEMU
- CWE-667
-
kernel: A race condition was found in the Linux kernel's watch queue due to a missing lock in…
- kernel
- CWE-667
- CVSS 7.8 High
A memory corruption vulnerability was addressed with improved locking.
- Apple macOS
- CWE-667
-
A flaw was found in the libvirt nwfilter driver.
- libvirt
- CWE-667
-
A flaw was found in the libvirt libxl driver.
- libvirt
- CWE-667
-
kernel: A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux…
- kernel
- CWE-667
-
An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt.
- libvirt
- CWE-667
- CVSS 5.3 Medium
Improper Locking in JetBrains Kotlin
- CWE-667
- CWE-829
<1.6.0 · fixed in 1.6.0
GHSA-2qp4-g3q3-f92w · CVE-2022-24329 -
gnome-shell: A locking protection bypass flaw was found in some versions of gnome-shell as shipped…
- gnome-shell
- CWE-667
- CVSS 4.4 Medium
Intel Chipset firmware: Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware…
- Intel Chipset firmware
- CWE-667
- CVSS 7.5 High
Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed
- Juniper Networks Junos OS
- CWE-667
- CVSS 5.9 Medium
Missing release of locks in PJSIP
- pjsip pjproject
- CWE-667
- CVSS 5.5 Medium
Deadlock in mutually recursive `tf.function` objects
- CWE-662
- CWE-667
<2.4.4 || >=2.5.0, <2.5.2 || >=2.6.0, <2.6.1 · fixed in 2.4.4, 2.5.2, 2.6.1
GHSA-h67m-xg8f-fxcf · CVE-2021-41213 - CVSS 5.9 Medium
Data race in va-ts
- Memory corruption
- CWE-662
<0.0.4 · fixed in 0.0.4
GHSA-3hj2-hh36-hv9v · CVE-2020-36220 -
Denial of service via deadlock in github.com/containers/storage
- CWE-667
<1.28.1 · fixed in 1.28.1
GHSA-7qw8-847f-pggm · CVE-2021-20291