Weakness (CWE)
CWE-414: Missing Lock Check
Base Draft
A product does not check to see if a lock is present before performing sensitive operations on a resource.
How to prevent it (1 mitigation)
-
Architecture and Design, Implementation
Implement a reliable lock mechanism.
Source: MITRE CWE-414
4 results · Feed
-
Low 2.1
concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock he…
-
Medium 5.9
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with adm…
-
Medium 6.7
Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability ma…
-
Medium 5.5
Use-After-Free in Service for Hardware Support App for Fingerprint Driver
Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App.