CVE-2026-22735: Improper Locking

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE. This issue affects Spring Foundation: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46...

Apple Multiple Products Improper Locking Vulnerability

Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes...

PT-2026-34414

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular locking dependency exists in the NFC NCI component. The nci close device function flushes rx wq and tx wq while holding the req lock mutex. This creates a conflict because nci...

MPTCP Protocol Heap Buffer Overflow DoS

The vulnerability of the mptcpretrans function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and...

MPTCP Protocol CVE

The vulnerabilities of the functions mptcpsendmsgfrag and mptcpsubflowgetsend in the net/mptcp/protocol.c module of the Linux operating system’s MPTCP implementation are related to insufficient resource locking. Exploiting these vulnerabilities could allow an attacker to compromise the...

fs/dlm/lowcomms.c Heap Buffer Overflow DoS

The vulnerabilities of the functions dlmlowcommsnewmsg and dlmlowcommscommitmsg in the fs/dlm/lowcomms.c module are related to errors during the update of the reference counter in Linux’s distributed locking mechanism. Exploiting these vulnerabilities can allow an attacker to cause service failur...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsdecompresscluster function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system is related to insufficient resource locking. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of...

DRI Graphics Heap Buffer Overflow DoS

The vulnerability of the radeonfenceissignaled function in the drivers/gpu/drm/radeon/radeonfence.c file of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to...

Linux physical layer network driver Heap Buffer Overflow DoS

The vulnerability of the phyconfiginband function in the drivers/net/phy/phy.c file of the Linux physical layer network driver is related to mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kasanpopulatevmalloc function in the mm/kasan/shadow.c module of the address sanitizer for Linux kernel involves mutual locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel device driver Heap Buffer Overflow DoS

The vulnerability of the driverattach function in the drivers/base/dd.c file of the Linux kernel’s device driver framework is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux drivers net team team_core Heap Buffer Overflow DoS

The vulnerability in the drivers/net/team/teamcore.c module of the Linux operating system is related to insufficient locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

rtw89_set_sar_from_acpi Heap Buffer Overflow DoS

The vulnerability of the rtw89setsarfromacpi function in the drivers/net/wireless/realtek/rtw89/sar.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper locking of resources. Exploiting this vulnerability may allow an attacker to cause a service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the p9connCancel function in the net/9p/transfd.c module of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260313-73-0012

A vulnerability in the crostypecaltmodework function of the Linux operating system kernel is related to insufficient resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

EUVD-2026-10920

Sylius has a Promotion Usage Limit Bypass via Race Condition...

ROS-20260311-73-0006

A vulnerability in the internal locking mechanism of the MongoDB database management system is related to locking with unrestricted external access. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Linux Ethernet Driver DoS

The vulnerabilities of the functions hbgresetprepare and hbgresetdone in the driver/net/ethernet/hisilicon/hibmcge/hbgerr.c file of the Ethernet network adapter driver for the Linux operating system are related to the occurrence of mutual locking. Exploiting these vulnerabilities could allow an...

CVE-2026-31824 Sylius has a Promotion Usage Limit Bypass via Race Condition

Sylius is an Open Source eCommerce Framework on Symfony. A Time-of-Check To Time-of-Use TOCTOU race condition was discovered in the promotion usage limit enforcement. The same class of vulnerability affects the promotion usage limit the global used counter on Promotion entities, coupon usage limi...

CVE-2026-31824

Sylius is an Open Source eCommerce Framework on Symfony. A Time-of-Check To Time-of-Use TOCTOU race condition was discovered in the promotion usage limit enforcement. The same class of vulnerability affects the promotion usage limit the global used counter on Promotion entities, coupon usage limi...