CWE-833 Deadlock

base

The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

01

übergeordnete Schwächen

Übergeordnete Klassen, zu denen dies gehört.

02

Schwachstellen (249)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-1622UShigh8.6—
A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cau…
CVE-2023-53522UShigh7.8—
In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex syzbot is reporting circular locking dependency bet…
CVE-2025-38338UShigh7.8—
In the Linux kernel, the following vulnerability has been resolved: fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() Sometimes, when a file was read while it was be…
CVE-2024-47696UShigh7.8—
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit aee2424246f9 ("RDMA/iwcm: F…
CVE-2024-41045UShigh7.8—
In the Linux kernel, the following vulnerability has been resolved: bpf: Defer work in bpf_timer_cancel_and_free Currently, the same case as previous patch (two timer callbacks t…
CVE-2026-70186UShigh7.5—
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-103558UShigh7.5—
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
CVE-2025-59463UShigh7.5—
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
CVE-2025-36010UShigh7.5—
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to releas…
CVE-2024-29172UShigh7.5—
Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to…
CVE-2026-64177USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded sk_receive_skb() The networking receive path is usually run from softi…
CVE-2026-53331USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock During the SSR/PDR down notification the tx_lock is t…
CVE-2026-53293USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG There were multiple issues in that code. First of all the order betw…
CVE-2026-53279USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure The LVDS init code looks up an I2C adapter using i2c_get_ad…
CVE-2026-53231USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages when using genphy We don't have support for PHY-driver SFP c…
CVE-2026-53197USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() iptfs_destroy_state() calls hrtimer_cancel() while hol…
CVE-2026-53106USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: bpf: Do not allow deleting local storage in NMI Currently, local storage may deadlock when deferring freeing s…
CVE-2026-53037USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hid_post_reset() You can build a USB device that includes a HID component and a s…
CVE-2026-53035USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix iter deadlock bpf_iter_unix_seq_show() may deadlock when lock_sock_fast() takes the…
CVE-2026-46165USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by…
03

Angriffsmuster (1)

CAPEC-Angriffsmuster, die dies ausnutzen.

04

Quelle

Wo diese Definition veröffentlicht ist.

scry

Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan