CWE-667

Improper Locking

Parent: CWE-662 - Improper Synchronization

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

722 vulnerabilities with CWE-667
CVE-2023-34320 MEDIUM
ARM Cortex-A77 Firmware - Denial of Service via Improper Locking in PAR_EL1 Register Handling
CVSS 5.5
CVE-2023-44298 LOW
Dell PowerEdge 16G Intel E5 BIOS 1.4.4 - Unauthenticated Information Tampering and Code Execution
CVSS 3.6
CVE-2023-44297 HIGH
Dell PowerEdge 16G Intel E5 BIOS 1.4.4 - Unauthenticated Information Disclosure and Code Execution
CVSS 7.1
CVE-2023-3889 HIGH
ARM Valhall GPU Kernel Driver r38p0 through r44p0 - Memory Corruption
CVSS 7.8
CVE-2023-3781 HIGH
Android - Use-After-Free via Improper Locking
CVSS 7.8
CVE-2023-44119 HIGH
Kernel Module <mutual exclusion management - DoS
CVSS 7.5
CVE-2023-42441 MEDIUM
vyper 0.2.9-0.3.9 - Improper Locking in Nonreentrant Decorator
CVSS 5.3
CVE-2023-38505 HIGH
DietPi-Dashboard 0.6.1 - Denial of Service via TLS Handshake Lock
CVSS 7.5
CVE-2023-3750 MEDIUM
libvirt - Denial of Service via Race Condition in virStoragePoolObjListSearch
CVSS 6.5
CVE-2023-33951 MEDIUM
Linux Kernel < 6.3.9 - Information Disclosure via vmwgfx Driver Race Condition
CVSS 6.7
CVE-2023-32258 HIGH
Linux Kernel >=5.15 <5.15.145 - Remote Code Execution via SMB2_LOGOFF and SMB2_CLOSE Command Processing
CVSS 8.1
CVE-2023-32257 HIGH
Linux Kernel >=5.15 <5.15.145 - Remote Code Execution via SMB2 Session Handling Race Condition
CVSS 8.1
CVE-2023-2430 MEDIUM
Linux Kernel < 6.2 - Denial of Service via Missing Lock in io_cqring_event_overflow
CVSS 5.5
CVE-2023-0160 MEDIUM
Linux Kernel < 6.4 - Denial of Service via BPF Subsystem Deadlock
CVSS 4.7
CVE-2023-21400 MEDIUM
Android - Kernel Memory Corruption due to Improper Locking in io_uring
CVSS 6.7
CVE-2023-21189 HIGH
Android 13 - Local Privilege Escalation via Lock Task Mode Bypass
CVSS 7.3
CVE-2023-3436 LOW
Xpdf 4.04 - Denial of Service via PDF Object Stream Length Field Deadlock
CVSS 3.3
CVE-2023-21120 HIGH
Android - Use-After-Free in cdm_engine.cpp
CVSS 7.8
CVE-2023-20746 MEDIUM
iot-yocto - Local Privilege Escalation via Improper Locking in vcu
CVSS 6.7
CVE-2023-20745 MEDIUM
iot-yocto - Local Privilege Escalation via Improper Locking
CVSS 6.7
CVE-2023-20743 MEDIUM
IoT-Yocto - Local Privilege Escalation via Improper Locking in VCU
CVSS 6.7
CVE-2023-20737 MEDIUM
iot-yocto - Use-After-Free via Improper Locking
CVSS 6.7
CVE-2023-20733 MEDIUM
iot-yocto - Use-After-Free via Improper Locking
CVSS 6.7
CVE-2023-2612 MEDIUM
Ubuntu Linux - Denial of Service via shiftfs Inode Locking Race Condition
CVSS 4.4
CVE-2023-22318 HIGH
Tribe29 Checkmk Appliance <1.6.5 - DoS
CVSS 7.5
Details
Vulnerabilities 722