CWE-667

Improper Locking

Parent: CWE-662 - Improper Synchronization

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

722 vulnerabilities with CWE-667
CVE-2022-20566 HIGH
Android - Use-After-Free in l2cap_chan_put
CVSS 7.8
CVE-2022-3996 HIGH
OpenSSL 3.0.0-3.0.6 - Denial of Service via Malformed X.509 Policy Constraint
CVSS 7.5
CVE-2022-42329 MEDIUM
Linux Kernel < 6.0 - Deadlock in Netback Driver
CVSS 5.5
CVE-2022-42328 MEDIUM
Linux Kernel < 6.0 - Deadlock in Netback Driver
CVSS 5.5
CVE-2022-42775 MEDIUM
Android - Denial of Service via Camera Driver Memory Corruption
CVSS 5.5
CVE-2022-39131 MEDIUM
Android - Memory Corruption in Camera Driver
CVSS 5.5
CVE-2022-4129 MEDIUM
Linux Layer 2 Tunneling Protocol < 6.0 - Denial of Service via Race Condition in sk_user_data Locking
CVSS 5.5
CVE-2022-39358 MEDIUM
Metabase 0.42.0-0.42.5 - Improper Locking via Embedded Dashboard Request
CVSS 6.5
CVE-2022-38690 MEDIUM
Android - Denial of Service via Camera Driver Memory Corruption
CVSS 5.5
CVE-2022-20422 HIGH
Android - Local Privilege Escalation via Race Condition in emulation_proc_handler
CVSS 7.0
CVE-2022-26473 MEDIUM
Android - Use-After-Free in vdec fmt due to Improper Locking
CVSS 6.7
CVE-2022-26452 MEDIUM
Android - Use-After-Free in ISP due to Improper Locking
CVSS 6.7
CVE-2022-3303 MEDIUM
Linux Kernel < 6.0 - Denial of Service via SNDCTL_DSP_SYNC Ioctl Race Condition
CVSS 4.7
CVE-2022-26451 MEDIUM
Android - Use-After-Free via Improper Locking in ged
CVSS 6.7
CVE-2022-3028 HIGH
Linux Kernel 3.14-4.9.326 - Race Condition in XFRM Subsystem via xfrm_probe_algs
CVSS 7.0
CVE-2022-38791 MEDIUM
MariaDB 10.3.0-10.3.35 - Denial of Service via Deadlock in compress_write
CVSS 5.5
CVE-2022-2959 HIGH
Linux Kernel 5.8-5.10.120 - Race Condition in Pipe Buffer Handling
CVSS 7.0
CVE-2022-32811 HIGH
macOS - Memory Corruption via Improper Locking
CVSS 7.8
CVE-2022-20376 MEDIUM
Android - Use-After-Free in trusty_log_seq_start
CVSS 6.7
CVE-2022-20371 MEDIUM
Android - Use-After-Free in dm_bow_dtr via Race Condition
CVSS 6.4
CVE-2022-21775 MEDIUM
Android - Use-After-Free in Sched Driver due to Improper Locking
CVSS 6.7
CVE-2022-24946 HIGH
Mitsubishielectric Q03udecpu Firmware - Improper Locking
CVSS 7.5
CVE-2022-20153 MEDIUM
Android Kernel - Use-After-Free in rcu_cblist_dequeue
CVSS 6.7
CVE-2022-20141 HIGH
Android - Use-After-Free in ip_check_mc_rcu
CVSS 7.0
CVE-2022-31624 MEDIUM
MariaDB < 10.2.41 - Denial of Service via Improper Lock Handling in server_audit Plugin
CVSS 5.5
Details
Vulnerabilities 722