CWE-909
CVEs classified under CWE-909, newest first.
5 CVEsRSS
CVE-2026-80953Medium· 5.5⚖ disputedkernel: i3c: master: adi: initialize the lock before enabling interrupts (CVE-2026-80953)
A flaw was found in the Linux kernel's i3c master driver. A race condition exists where the `adi_i3c_master_probe()` function requests an interrupt and unmasks a register before a critical lock (`xferqueue.lock`) is properly initialized. T…
CVE-2026-80967Medium· 5.5⚖ disputedkernel: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ (CVE-2026-80967)
A flaw was found in the ALSA pcxhr driver within the Linux kernel. The `pcxhr_probe()` function requests a threaded interrupt before properly initializing a critical mutex (`mgr->lock`). This oversight could allow an early interrupt to ope…
CVE-2026-89540High· 7.0kernel: sunrpc: init gssp_lock before publishing proc entry (CVE-2026-89540)
A flaw was found in the Linux kernel's sunrpc component. A race condition exists where the `gssp_lock` mutex is not initialized before its associated `/proc/net/rpc/use-gss-proxy` entry is published. This allows a local attacker to trigger…
CVE-2026-89594Medium· 5.5⚖ disputedkernel: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device (CVE-2026-89594)
A flaw was found in the Linux kernel's OMAP SSI driver. The driver uses a synthetic HSI controller device that does not properly initialize its Direct Memory Access (DMA) mask. This oversight can lead to the driver crashing or triggering w…
CVE-2025-54410Low· 3.3Moby is an open source container framework developed by Docker Inc
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before …