Missing Lock Check

A product does not check to see if a lock is present before performing sensitive operations on a resource.

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-54906 1Rubyconcurrency 1Concurrent Ruby Jun 26, 2026 Jun 24, 2026 2.1 LOW· v4 9.8 CRITICAL· v3 N/A· v2 concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock obj...Show more concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another thread. A second writer can then enter its critical section while the first writer is still running. Concurrent::ReadWriteLock#release_read_lock also decrements the shared counter even when no read lock is held. Calling it on a fresh lock changes the counter from 0 to -1, after which normal read acquisition raises Concurrent::ResourceLimitError. This is a synchronization correctness issue in the public Concurrent::ReadWriteLock API. This vulnerability is fixed in 1.3.7.Show less
CVE-2025-54510 - - Jun 17, 2026 Apr 16, 2026 5.9 MEDIUM· v4 N/A· v3 N/A· v2 A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising g...Show more A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.Show less
CVE-2025-54625 1Huawei 1Harmonyos Jun 17, 2026 Aug 6, 2025 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2023-5447 - - Jun 17, 2026 May 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App.