CWE-667— Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.— MITRE CWE catalog

745 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-667page 2 of 15

CVE-2023-21000HIGHCVSS 7.8EG 7.8
2023-03-24
In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Androi…
CVE-2023-20939HIGHCVSS 7.8EG 7.8
2023-02-28
In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is …
CVE-2023-20928HIGHCVSS 7.8EG 7.8
2023-01-26
In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.P…
CVE-2022-20566HIGHCVSS 7.8EG 7.8
2022-12-16
In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.P…
CVE-2022-32811HIGHCVSS 7.8EG 7.8
2022-08-24
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.
CVE-2021-39801HIGHCVSS 7.8EG 7.8
2022-04-12
In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produ…
CVE-2021-39640HIGHCVSS 7.8EG 7.8
2021-12-15
In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo…
CVE-2021-0529HIGHCVSS 7.8EG 7.8
2021-06-21
In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Pr…
CVE-2020-29661HIGHCVSS 7.8EG 7.8
2020-12-09
A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.
CVE-2019-8829HIGHCVSS 7.8EG 7.8
2020-10-27
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6.1, tvOS 13.2, iOS 13.2 and iPadOS 13.2. An application …
CVE-2020-0423HIGHCVSS 7.8EG 7.8
2020-10-14
In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed f…
CVE-2020-0420HIGHCVSS 7.8EG 7.8
2020-10-14
In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not …
CVE-2020-0357HIGHCVSS 7.8EG 7.8
2020-09-17
In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for explo…
CVE-2020-0433HIGHCVSS 7.8EG 7.8
2020-09-17
In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for …
CVE-2020-0243HIGHCVSS 7.8EG 7.8
2020-08-11
In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction …
CVE-2020-0242HIGHCVSS 7.8EG 7.8
2020-08-11
In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed…
CVE-2020-15529HIGHCVSS 7.8EG 7.8
2020-07-05
An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak file permissions and can be exploited by us…
CVE-2019-14091HIGHCVSS 7.8EG 7.8
2020-06-22
Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, …
CVE-2019-2174HIGHCVSS 7.8EG 7.8
2019-09-05
In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution pr…
CVE-2019-2025HIGHCVSS 7.8EG 7.8
2019-06-19
In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed fo…
CVE-2019-2050HIGHCVSS 7.8EG 7.8
2019-05-08
In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…
CVE-2010-4210HIGHCVSS 7.8EG 7.8
2010-11-22
The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations…
CVE-2002-0051HIGHCVSS 7.8EG 7.8
2002-04-04
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.
CVE-2022-20141HIGHCVSS 7.0EG 7.8
2022-06-15
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interacti…
CVE-2026-103670HIGHCVSS 7.5EG 7.5
2026-10-06
When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed approval. Because fork pull request runs are inserted under the base repository…
CVE-2026-64374HIGHCVSS 7.5EG 7.5
2026-07-25
In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority tas…
CVE-2026-53180HIGHCVSS 7.5EG 7.5
2026-06-25
In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_remote_up() tmigr_handle_remote_cpu() skips timer_expire_remote() when cpu == smp_processor_id(), assuming the local softi…
CVE-2026-52946HIGHCVSS 7.5EG 7.5
2026-06-24
In the Linux kernel, the following vulnerability has been resolved: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling A SOFTIRQ-safe to SOFTIRQ-unsafe lock order deadlock can occur in send_sigio() and send_sigurg() when a proce…
CVE-2026-46031HIGHCVSS 7.5EG 7.5
2026-05-27
In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Reinstate disabling of BHs around IRQ handler If the driver executes ks8851_irq() AND a TX packet has been sent, then the driver enables TX queue via netif_…
CVE-2026-43296HIGHCVSS 7.5EG 7.5
2026-05-08
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky NIX SQ manager sticky mode is known to cause stalls when multiple SQs share an SMQ and transmit concurrently.…
CVE-2026-43253HIGHCVSS 7.5EG 7.5
2026-05-06
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With iommu.strict=1, the existing completion wait path can cause soft lockups under stressed environment, as wait_on_sem() …
CVE-2026-43029HIGHCVSS 7.5EG 7.5
2026-05-01
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lockup in mptcp_recvmsg() syzbot reported a soft lockup in mptcp_recvmsg() [0]. When receiving data with MSG_PEEK | MSG_WAITALL flags, the skb is not re…
CVE-2026-31598HIGHCVSS 7.5EG 7.5
2026-04-24
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dio_end_io_write ocfs2_unlink takes orphan dir inode_lock first and then ip_alloc_sem, while in ocfs2_dio_end_io_write, i…
CVE-2026-31467HIGHCVSS 7.5EG 7.5
2026-04-22
In the Linux kernel, the following vulnerability has been resolved: erofs: add GFP_NOIO in the bio completion if needed The bio completion path in the process context (e.g. dm-verity) will directly call into decompression rather than tri…
CVE-2026-21914HIGHCVSS 7.5EG 7.5
2026-01-15
An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (Dos). If an SRX Series device receives a specifically malformed…
CVE-2023-44119HIGHCVSS 7.5EG 7.5
2023-10-11
Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.
CVE-2023-38505HIGHCVSS 7.5EG 7.5
2023-07-27
DietPi-Dashboard is a web dashboard for the operating system DietPi. The dashboard only allows for one TLS handshake to be in process at a given moment. Once a TCP connection is established in HTTPS mode, it will assume that it should be w…
CVE-2023-22318HIGHCVSS 7.5EG 7.5
2023-05-15
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.
CVE-2023-22412HIGHCVSS 7.5EG 7.5
2023-01-13
An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based attacker to cause a flow processing daemon (flowd) crash and ther…
CVE-2022-48216HIGHCVSS 7.5EG 7.5
2023-01-04
Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds.
CVE-2022-3996HIGHCVSS 7.5EG 7.5
2022-12-13
If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems (most widely: Windows) this results in a denial of service when …
CVE-2022-24946HIGHCVSS 7.5EG 7.5
2022-06-15
Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Elec…
CVE-2021-43429HIGHCVSS 7.5EG 7.5
2022-04-07
A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a failture to release locks pool->lock.
CVE-2022-22175HIGHCVSS 7.5EG 7.5
2022-01-19
An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Co…
CVE-2021-29509HIGHCVSS 7.5EG 7.5
2021-05-11
Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy pe…
CVE-2021-31422HIGHCVSS 7.5EG 7.5
2021-04-29
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to …
CVE-2020-3704HIGHCVSS 7.5EG 7.5
2020-11-02
u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This CVE is equivalent to InvalidConnectionRequest(CVE-2019-19193)…
CVE-2020-13246HIGHCVSS 7.5EG 7.5
2020-05-20
An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another.
CVE-2020-10573HIGHCVSS 7.5EG 7.5
2020-03-14
An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge.
CVE-2019-15513HIGHCVSS 7.5EG 7.5
2019-08-23
An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a lon…

Map vulnerabilities like CWE-667 to your infrastructure

EchelonGraph correlates every CVE — across CWE-667 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →