CWE-667: Improper Locking — known CVE vulnerabilities
CVEs classified under CWE-667 (Improper Locking), ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (50)
CVE-2026-53049 — CVSS 9.8 (critical): In the Linux kernel, the following vulnerability has been resolved: gfs2: add some missing log locking Function gfs2_logd() calls the log…
CVE-2025-22077 — CVSS 9.8 (critical): In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts…
CVE-2024-58087 — CVSS 9.8 (critical): In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the…
CVE-2021-47587 — CVSS 9.8 (critical): In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The…
CVE-2020-12658 — CVSS 9.8 (critical): gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream…
CVE-2019-5886 — CVSS 9.8 (critical): An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation lock file in the Add…
CVE-2026-53358 — CVSS 8.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()…
CVE-2026-53072 — CVSS 8.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER…
CVE-2026-53071 — CVSS 8.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp…
CVE-2026-43215 — CVSS 8.8 (high): In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used to use the…
CVE-2026-31629 — CVSS 8.8 (high): In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: add missing return after LLCP_CLOSED checks In…
CVE-2025-38643 — CVSS 8.8 (high): In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()…
CVE-2025-22012 — CVSS 8.8 (high): In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu" There…
CVE-2022-48785 — CVSS 8.8 (high): In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Some time ago…
CVE-2020-15674 — CVSS 8.8 (high): Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we…
CVE-2021-1622 — CVSS 8.6 (high): A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow…
CVE-2020-24606 — CVSS 8.6 (high): Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during…
CVE-2018-0228 — CVSS 8.6 (high): A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated…
CVE-2020-11284 — CVSS 8.4 (high): Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region…
CVE-2025-38491 — CVSS 8.2 (high): In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller…
CVE-2025-21710 — CVSS 8.2 (high): In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of extreme memory squeeze Testing with iperf3…
CVE-2023-32258 — CVSS 8.1 (high): A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of…
CVE-2023-32257 — CVSS 8.1 (high): A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of…
CVE-2026-64098 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates…
CVE-2026-53062 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: fix missing locks in invalidating cache blocks In…
CVE-2026-53054 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix VM_BIND UNMAP locking Wrong argument meant that the objs…
CVE-2026-46112 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() Sashiko points out…
CVE-2026-43211 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Commit a4e772898f8b ("PCI…
CVE-2026-31667 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep…
CVE-2026-23103 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the addrs_lock be per…
CVE-2022-50518 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: parisc: Fix locking in pdc_iodc_print() firmware call Utilize pdc_lock…
CVE-2023-53580 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: core: Help prevent panic during UVC unconfigure Avichal…
CVE-2025-39791 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: dm: dm-crypt: Do not partially accept write BIOs with zoned targets…
CVE-2025-38276 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix "don't skip locked entries when scanning entries" Commit…
CVE-2025-38150 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: af_packet: move notifier's packet_dev_mc out of rcu critical section…
CVE-2022-49998 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix locking in rxrpc's sendmsg Fix three bugs in the rxrpc's…
CVE-2025-38058 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under…
CVE-2025-37997 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking…
CVE-2025-37741 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: jfs: Prevent copying of nlink with value 0 from disk inode syzbot…
CVE-2025-21851 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: bpf: Fix softlockup in arena_map_free on 64k page kernel On an aarch64…
CVE-2025-21827 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()…
CVE-2024-58070 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT In…
CVE-2022-49531 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: loop: implement ->free_disk Ensure that the lo_device which is stored…
CVE-2022-49337 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock When…
CVE-2024-57921 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy trim function When…
CVE-2024-56531 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Use snd_card_free_when_closed() at disconnection The USB…
CVE-2024-53207 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible deadlocks This fixes possible deadlocks…
CVE-2018-9344 — CVSS 7.8 (high): In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local…
CVE-2024-53080 — CVSS 7.8 (high): In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Lock XArray when getting entries for the VM Similar to…