CWE-667: Improper Locking
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- qemu, debian linux +1 moreA deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ...4.4 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreA race condition was found in the Linux kernel's watch queue due to a missing lock in...7.0 High
- apple macos, mac os x +1 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in...7.8 High
- google androidIn trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper...6.7 Medium
- google androidIn dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race...6.4 Medium
- google android, mediatek, inc. mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt8167, mt8167s, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn sched driver, there is a possible use after free due to improper locking. This could lead to...6.7 Medium
- mitsubishielectric l02cpu-p firmware, l02cpu firmware, l02scpu-p firmware +29 more +31 moreImproper Resource Locking vulnerability in Mitsubishi Electric MELSEC-Q Series Q03UDECPU all...7.5 High
- google androidIn rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper...6.7 Medium
- google androidIn ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This...7.0 High
- mariadbMariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress...5.5 Medium
- mariadbMariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress...5.5 Medium
- mariadbMariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin...5.5 Medium
- mariadbMariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream...5.5 Medium
- seagate cortx-s3 serverA Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the...7.5 High
- xen, debian linux, fedoraproject fedora +2 moreRacy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log...5.6 Medium
- google androidIn ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This...7.8 High
- redhat libvirt, netapp ontap select deploy administration utility +1 moreA flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method...4.3 Medium
- jetbrains kotlin, oracle communications cloud native core binding support function, communications pricing design center +2 moreImproper Locking in JetBrains Kotlin5.3 Medium
- centos stream, gnome gnome-shell +1 moreA locking protection bypass flaw was found in some versions of gnome-shell as shipped within...6.1 Medium
- intel chipset firmware, power management controller +1 moreImproper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before...4.4 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed7.5 High
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow driver, there is a possible memory corruption due to improper locking. This could lead to...6.7 Medium
- redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...6.5 Medium
- teluu pjsip, debian linux, pjsip pjproject +2 moreMissing release of locks in PJSIP5.9 Medium
- debian linux, linux kernel +1 moreA vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due...5.5 Medium
- google androidIn __configfs_open_file of file.c, there is a possible use-after-free due to improper locking....6.7 Medium
- google androidIn regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This...6.7 Medium
- google androidIn mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a...4.4 Medium
- google androidIn __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper...7.8 High
- google tensorflowDeadlock in mutually recursive `tf.function` objects5.5 Medium
- nvidia virtual gpu, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it...5.5 Medium
- google androidIn ccu, there is a possible memory corruption due to improper locking. This could lead to local...6.7 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability8.6 High
- actions-semi ats2815 firmware, ats2819 firmware, ats2819p firmware +2 more +4 moreThe Bluetooth Classic implementation on Actions ATS2815 and ATS2819 chipsets does not properly...6.5 Medium
- actions-semi ats2815 firmware, ats2819 firmware, ats2819p firmware +2 more +4 moreThe Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not...6.5 Medium
- zh-jieli ac6901 firmware, ac6921 firmware, ac6925 firmware +2 more +4 moreThe Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices does not properly...5.7 Medium
- redhat libvirt, debian linux, netapp ontap select deploy administration utility +1 more +3 moreAn improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It...6.5 Medium
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morebtrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock)...5.5 Medium
- google androidIn memory management driver, there is a possible memory corruption due to improper locking. This...7.8 High
- puma, debian linux +1 moreKeepalive Connections Causing Denial Of Service in puma7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +129 more +131 moreLocked memory can be unlocked and modified by non secure boot loader through improper system call...8.4 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...7.3 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- apple ipados, macos, tvos +5 more +7 moreA race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2,...7.0 High
- storage project storage, fedoraproject fedora, redhat enterprise linux +1 more +3 moreImproper Locking in github.com/containers/storage6.5 Medium
- linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 moreAn issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers...5.5 Medium
- linux kernel, netapp aff baseboard management controller, baseboard management controller 500f firmware +6 more +8 moreA local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race...7.0 High
- gssproxy project gssproxy, debian linux +1 moregssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in...9.8 Critical
- va-ts project va-tsData race in va-ts5.9 Medium
- google androidIn xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to...6.7 Medium
- Show moreLoading…