CWE-833 Deadlock
baseThe product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (249)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-1622US | high8.6 | — | ||
A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cau… | ||||
| CVE-2023-53522US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
syzbot is reporting circular locking dependency bet… | ||||
| CVE-2025-38338US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
Sometimes, when a file was read while it was be… | ||||
| CVE-2024-47696US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
In the commit aee2424246f9 ("RDMA/iwcm: F… | ||||
| CVE-2024-41045US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Defer work in bpf_timer_cancel_and_free
Currently, the same case as previous patch (two timer callbacks t… | ||||
| CVE-2026-70186US | high7.5 | — | ||
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-103558US | high7.5 | — | ||
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2025-59463US | high7.5 | — | ||
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers. | ||||
| CVE-2025-36010US | high7.5 | — | ||
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2
could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to releas… | ||||
| CVE-2024-29172US | high7.5 | — | ||
Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to… | ||||
| CVE-2026-64177US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
phonet/pep: disable BH around forwarded sk_receive_skb()
The networking receive path is usually run from softi… | ||||
| CVE-2026-53331US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
During the SSR/PDR down notification the tx_lock is t… | ||||
| CVE-2026-53293US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
There were multiple issues in that code.
First of all the order betw… | ||||
| CVE-2026-53279US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/gma500/oaktrail_lvds: fix hang on init failure
The LVDS init code looks up an I2C adapter using i2c_get_ad… | ||||
| CVE-2026-53231US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: phy: don't try to setup PHY-driven SFP cages when using genphy
We don't have support for PHY-driver SFP c… | ||||
| CVE-2026-53197US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()
iptfs_destroy_state() calls hrtimer_cancel() while hol… | ||||
| CVE-2026-53106US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Do not allow deleting local storage in NMI
Currently, local storage may deadlock when deferring freeing s… | ||||
| CVE-2026-53037US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: fix deadlock in hid_post_reset()
You can build a USB device that includes a HID component
and a s… | ||||
| CVE-2026-53035US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf, sockmap: Fix af_unix iter deadlock
bpf_iter_unix_seq_show() may deadlock when lock_sock_fast() takes the… | ||||
| CVE-2026-46165US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: vport: fix self-deadlock on release of tunnel ports
vports are used concurrently and protected by… | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan