Skip to content
OpenAdvisories

Weakness (CWE)

CWE-667: Improper Locking

Class Draft

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

How to prevent it (1 mitigation)

  1. Implementation

    Use industry standard APIs to implement locking mechanism.

Source: MITRE CWE-667

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2025-23134 Public exploit

    ALSA: timer: Don't take register_mutex with copy_from/to_user()

    In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take register_mutex with copy_from/to_user() The infamous mmap_lock taken in copy_from/to_user() can be often problematic when it's called inside another mutex, as they mig…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.0
    CVE-2021-1782 Exploited Public exploit

    A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-0…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Nov 3, 2021