CWE-414
Missing Lock Check
Description
A product does not check to see if a lock is present before performing sensitive operations on a resource.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-54906 | Cri | 0.57 | 9.8 | 0.00 | Jun 24, 2026 | concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another… | ||
| CVE-2025-54625 | Med | 0.44 | 6.7 | 0.00 | Aug 6, 2025 | Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2025-54510 | Med | 0.38 | — | 0.00 | Apr 16, 2026 | A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity. | ||
| CVE-2023-5447 | Med | 0.36 | 5.5 | 0.00 | May 14, 2024 | Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App. |
- risk 0.57cvss 9.8epss 0.00
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another…
- risk 0.44cvss 6.7epss 0.00
Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.38cvss —epss 0.00
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.
- risk 0.36cvss 5.5epss 0.00
Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App.