Weaknesses of type CWE-662

30 results

Sincronização Inadequada Entre Threads

Ocorre quando múltiplas threads acessam e modificam dados compartilhados sem mecanismos de sincronização (locks, mutexes, ou operações atômicas). Isso causa race conditions onde o resultado final depende da ordem de execução das threads, levando a corrupção de dados, lógica quebrada ou comportamentos impredizíveis.

Example

Um contador global é incrementado por duas threads simultaneamente sem proteção: ambas leem o valor 5, incrementam para 6, e escrevem 6 de volta — resultado esperado era 7. Em um servidor web, isso pode deixar sessões inconsistentes ou estados de autenticação corrompidos.

How to mitigate

Use primitivas de sincronização apropriadas (mutex, semáforo, operações atômicas) para proteger seções críticas. Em linguagens modernas, prefira estruturas thread-safe (ConcurrentHashMap em Java, canais em Go) e evite compartilhamento desnecessário de estado mutável entre threads.

CVE-2024-7409HIGHQemu: denial of service via improper synchronization in qemu nbd server during socket closureEPSS 1.0%CVE-2024-32644CRITICALEvmos' transaction execution not accounting for all state transition after interaction with precompilesEPSS 0.9%CVE-2026-39865MEDIUMAxios HTTP/2 Session Cleanup State Corruption VulnerabilityEPSS 0.7%CVE-2026-72057HIGHnet/sched: act_ct: preserve tc_skb_cb across defragmentationEPSS 0.6%CVE-2025-68775CRITICALnet/handshake: duplicate handshake cancellations leak socketEPSS 0.5%CVE-2026-64312HIGHcrypto: pcrypt - restore callback for non-parallel fallbackEPSS 0.5%CVE-2026-28789HIGHOliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handlingEPSS 0.5%CVE-2025-27104LOWdouble eval in For List Iter in VyperEPSS 0.4%CVE-2026-43466HIGHnet/mlx5e: Fix DMA FIFO desync on error CQE SQ recoveryEPSS 0.4%CVE-2026-13489LOW78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronizationEPSS 0.3%CVE-2026-43362HIGHsmb: client: fix in-place encryption corruption in SMB2_write()EPSS 0.3%CVE-2026-63832HIGHwifi: mt76: add wcid publish check in mt76_sta_addEPSS 0.2%CVE-2026-68404HIGHwifi: cfg80211: use wiphy work for socket owner autodisconnectEPSS 0.2%CVE-2026-64556HIGHperf/core: Detach event groups during remove_on_execEPSS 0.2%CVE-2022-32643MEDIUMIn ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pEPSS 0.2%CVE-2025-22853LOWImproper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege viaEPSS 0.2%CVE-2026-68103HIGHdrm/amdgpu: reject mapping a reserved doorbell to a new queueEPSS 0.2%CVE-2022-32609MEDIUMIn vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pEPSS 0.1%CVE-2022-32610MEDIUMIn vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution pEPSS 0.1%CVE-2026-68149HIGHfs: preserve ACL_DONT_CACHE state in forget_cached_acl()EPSS 0.1%