Weaknesses of type CWE-667

154 results

Sincronização inadequada ou ausente

Ocorre quando código que acessa dados compartilhados entre threads não usa mecanismos de lock (mutex, semáforo) ou usa incorretamente, permitindo race conditions. Múltiplas threads podem modificar o mesmo dado simultaneamente, causando corrupção de estado, comportamentos imprevistos ou falhas de segurança.

Example

Um sistema web gerencia um contador de sessões ativas sem sincronização: duas requisições simultâneas leem o valor 100, incrementam para 101 e escrevem ambas o resultado, quando deveria ser 102. Em contexto crítico, como controle de acesso ou limite de recursos, isso pode ser explorado.

How to mitigate

Use primitivas de sincronização adequadas (mutex, ReentrantLock, synchronized) ao acessar dados compartilhados. Minimize seções críticas e prefira estruturas thread-safe quando disponíveis (ConcurrentHashMap, AtomicInteger). Code review e testes com ferramentas de detecção de race conditions.

CVE-2023-53022MEDIUMnet: enetc: avoid deadlock in enetc_tx_onestep_tstamp()EPSS 0.1%CVE-2025-21634MEDIUMcgroup/cpuset: remove kernfs active breakEPSS 0.1%CVE-2025-22012HIGHRevert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu"EPSS 0.1%CVE-2025-21672MEDIUMafs: Fix merge preference rule failure conditionEPSS 0.1%CVE-2024-54460MEDIUMBluetooth: iso: Fix circular lock in iso_listen_bisEPSS 0.1%CVE-2024-54191MEDIUMBluetooth: iso: Fix circular lock in iso_conn_big_syncEPSS 0.1%CVE-2024-56743MEDIUMnfs_common: must not hold RCU while calling nfsd_file_put_localEPSS 0.1%CVE-2026-45404MEDIUMOpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent accessEPSS 0.1%CVE-2022-49759MEDIUMVMCI: Use threaded irqs instead of taskletsEPSS 0.1%CVE-2026-24182MEDIUMNVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A successful exploit ofEPSS 0.1%CVE-2025-63396LOWAn issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or EPSS 0.1%CVE-2022-49742MEDIUMf2fs: initialize locks earlier in f2fs_fill_super()EPSS 0.1%CVE-2022-50382MEDIUMpadata: Always leave BHs disabled when running ->parallel()EPSS 0.1%CVE-2023-53281MEDIUMdrivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()EPSS 0.1%CVE-2023-53233MEDIUMnet/smc: fix deadlock triggered by cancel_delayed_work_syn()EPSS 0.1%CVE-2024-58059MEDIUMmedia: uvcvideo: Fix deadlock during uvc_probeEPSS 0.1%CVE-2025-39832MEDIUMnet/mlx5: Fix lockdep assertion on sync reset unload eventEPSS 0.1%CVE-2026-22735LOWServer Sent Event stream corruptionEPSS 0.1%CVE-2025-39884MEDIUMbtrfs: fix subvolume deletion lockup caused by inodes xarray raceEPSS 0.1%CVE-2025-20044MEDIUMImproper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation ofEPSS 0.1%