TYPE DE FAIBLESSE

Verrouillage incorrect CWE-667

766 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-667 (en anglais) →

CVE-2025-68823Les systèmes Linux utilisant le framework `ublk` (userspace block device) sont vulnérables à un blocage du noyau (kernel deadlock). Un utilisateur authentifié disposant d'un accès … 5.5 MOYENNE

CVE-2025-68770Les systèmes utilisant des adaptateurs réseau Broadcom NetXtreme-E (bnxt_en) avec certaines versions du noyau Linux sont concernés. Un attaquant peut envoyer un trafic réseau spéci… 7.5 ÉLEVÉE

CVE-2025-68657Les appareils utilisant le pilote USB Host HID d'Espressif ESP-IDF avant la version 1.1.0 sont sensibles à une faille de corruption de mémoire causée par une erreur de double libér… 6.4 MOYENNE

CVE-2025-34467ZwiiCMS versions prior to 13.7.00 contain a denial-of-service vulnerability in multiple administrative endpoints due to improper authorization checks combined with flawed resource … 5.3 MOYENNE

CVE-2025-68333In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix possible deadlock in the deferred_irq_workfn() For PREEMPT_RT=y kernels, the deferred_irq_workf… 5.5 MOYENNE

CVE-2025-68223In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the attempt to progress the queue w… 5.5 MOYENNE

CVE-2025-43510Les appareils Apple utilisant iOS, iPadOS, macOS, tvOS, visionOS et watchOS sont affectés par une faille de corruption de mémoire. Un attaquant peut utiliser une application malvei… KEV 7.8 ÉLEVÉE

CVE-2025-14345A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific cond… 2.3 FAIBLE

CVE-2025-48618In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of… 6.8 MOYENNE

CVE-2025-63396An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a D… 3.3 FAIBLE

CVE-2025-10151Les passerelles Softing smartLink HW-PN (v1.02–1.03) et HW-DP (v1.31) sont sensibles à une fuite de mémoire et de ressources causée par un verrouillage inapproprié. Un attaquant di… 7.2 ÉLEVÉE

CVE-2025-58153Les systèmes matériels équipés d'un pont haute vitesse (HSB - High-Speed Bridge) sont susceptibles de subir un blocage complet du système. Un attaquant non authentifié peut déclenc… 8.2 ÉLEVÉE

CVE-2023-53620In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in status_resync status_resync() will calculate 'curr_resync - recovery_active' to show us… 5.5 MOYENNE

CVE-2022-50549In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata Following concurrent processes: … 5.5 MOYENNE

CVE-2022-50518affecte le noyau Linux sur les systèmes d'architecture PA-RISC. Un utilisateur local disposant de privilèges limités peut exploiter un problème de verrouillage dans le processus d'… 7.8 ÉLEVÉE

CVE-2023-53591In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix deadlock in tc route query code Cited commit causes ABBA deadlock[0] when peer flows are create… 5.5 MOYENNE

CVE-2023-53590In the Linux kernel, the following vulnerability has been resolved: sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop With this refcnt added in sctp_stream_prio… 5.5 MOYENNE

CVE-2023-53580Les systèmes Linux utilisant le pilote USB Gadget UVC sont susceptibles de subir un kernel panic (plantage du système) lors du processus de déconfiguration du pilote. Un attaquant … 7.8 ÉLEVÉE

CVE-2023-53549In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Rework long task execution when adding/deleting entries When adding/deleting large number of… 5.5 MOYENNE

CVE-2023-53519In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting below error when using KCSAN to check the d… 5.5 MOYENNE

CVE-2025-39915In the Linux kernel, the following vulnerability has been resolved: net: phy: transfer phy_config_inband() locking responsibility to phylink Problem description =================… 5.5 MOYENNE

CVE-2025-39910In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() kasan_populate_vmalloc() and its helpers ig… 5.5 MOYENNE

CVE-2025-39885In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due to a recursive semapho… 5.5 MOYENNE

CVE-2025-39884In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by inodes xarray race There is a race condition between inode evic… 4.7 MOYENNE

CVE-2025-39843In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock recursion. The issue is… 5.5 MOYENNE

CVE-2022-50382In the Linux kernel, the following vulnerability has been resolved: padata: Always leave BHs disabled when running ->parallel() A deadlock can happen when an overloaded system ru… 5.5 MOYENNE

CVE-2023-53348In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when aborting transaction during relocation with scrub Before relocating a block group we … 5.5 MOYENNE

CVE-2022-50371In the Linux kernel, the following vulnerability has been resolved: led: qcom-lpg: Fix sleeping in atomic lpg_brighness_set() function can sleep, while led's brightness_set() cal… 5.5 MOYENNE

CVE-2025-39832In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset u… 5.5 MOYENNE

CVE-2023-53281In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() Commit 041879b12ddb ("drivers: staging… 5.5 MOYENNE

CVE-2023-53233In the Linux kernel, the following vulnerability has been resolved: net/smc: fix deadlock triggered by cancel_delayed_work_syn() The following LOCKDEP was detected: Workqueue: … 5.5 MOYENNE

CVE-2023-53151In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit for raid1/raid10 plugged bio. W… 5.5 MOYENNE

CVE-2023-53149In the Linux kernel, the following vulnerability has been resolved: ext4: avoid deadlock in fs reclaim with page writeback Ext4 has a filesystem wide lock protecting ext4_writepa… 5.5 MOYENNE

CVE-2025-39791Les systèmes Linux utilisant `dm-crypt` sur des périphériques de stockage zonés sont affectés par cette faille. Un utilisateur local disposant de privilèges de base peut provoquer … 7.8 ÉLEVÉE

CVE-2025-39782In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jbd2_journal_shrink_che… 5.5 MOYENNE

CVE-2025-39773In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_interval to a large valu… 5.5 MOYENNE

CVE-2025-39769In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix lockdep warning during rmmod The commit under the Fixes tag added a netdev_assert_locked() in bnx… 5.5 MOYENNE

CVE-2025-39767In the Linux kernel, the following vulnerability has been resolved: LoongArch: Optimize module load time by optimizing PLT/GOT counting When enabling CONFIG_KASAN, CONFIG_PREEMPT… 5.5 MOYENNE

CVE-2025-39736In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is enabled, calling pr_warn… 5.5 MOYENNE

CVE-2025-39712In the Linux kernel, the following vulnerability has been resolved: media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval Getting / Setting the frame interval usi… 5.5 MOYENNE

CVE-2025-38720In the Linux kernel, the following vulnerability has been resolved: net: hibmcge: fix rtnl deadlock issue Currently, the hibmcge netdev acquires the rtnl_lock in pci_error_handle… 5.5 MOYENNE

CVE-2025-38711In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is called with ReplaceIfExi… 5.5 MOYENNE

CVE-2025-38650In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutex_lock check in hfsplus_free_extents Syzbot reported an issue in hfsplus filesystem: ----… 5.5 MOYENNE

CVE-2025-38643Les systèmes utilisant le noyau Linux avec des fonctionnalités Wi-Fi actives sont affectés par une erreur de synchronisation dans le sous-système de configuration sans fil. Un atta… 8.8 ÉLEVÉE

CVE-2025-38551In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during probe() The deadlock appears in a stack trace like: virtnet_p… 5.5 MOYENNE

CVE-2025-38520In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don't call mmput from MMU notifier callback If the process is exiting, the mmput inside mmu notifi… 5.5 MOYENNE

CVE-2025-38506In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page memory attributes When running an SEV-SNP guest with a suf… 5.5 MOYENNE

CVE-2025-20044Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access. 5.6 MOYENNE

CVE-2025-1221A Zigbee Radio Co-Processor (RCP), which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system (CPCd) due to heavy Zigbee traffic, resulting in a D… 5.9 MOYENNE

CVE-2025-38491Les systèmes utilisant le noyau Linux avec Multipath TCP (MPTCP) activé sont affectés par cette faille. Un attaquant distant et non authentifié peut envoyer des paquets réseau spéc… 8.2 ÉLEVÉE