CWE-667
765 CVEs • Abstraction: Class
Improper Locking
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
CVEs (765)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Linux Redhat4Enterprise Linux Enterprise Linux For Real TimeEnterprise Linux For Real Time For Nfv+1 moreJun 17, 2026 Jul 24, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This...Show more |
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper lock...Show more |
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and SMB2_LOGOFF commands. The issue results from the lack of pro...Show more |
A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat. |
2Fedoraproject Linux2Fedora Linux KernelJun 17, 2026 Jul 18, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system. |
In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User int...Show more |
In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges nee...Show more |
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
|
In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...Show more |
2Google Linuxfoundation3Android Iot YoctoYoctoJun 17, 2026 Jun 6, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID...Show more |
2Google Linuxfoundation3Android Iot YoctoYoctoJun 17, 2026 Jun 6, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID...Show more |
2Google Linuxfoundation3Android Iot YoctoYoctoJun 17, 2026 Jun 6, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID...Show more |
2Google Linuxfoundation3Android Iot YoctoYoctoJun 17, 2026 Jun 6, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP...Show more |
2Google Linuxfoundation3Android Iot YoctoYoctoJun 17, 2026 Jun 6, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP...Show more |
Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of serv...Show more |
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5. |
4Debian FedoraprojectLinux+1 more8Debian Linux FedoraH300s Firmware+5 moreOct 8, 2026 Apr 25, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component. |
3Debian LinuxNetapp8Debian Linux H300s FirmwareH410c Firmware+5 moreJun 17, 2026 Apr 24, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabil...Show more |
In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat...Show more |
In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. U...Show more |