1752
CWE-832: Unlock of a Resource that is not Locked
Weakness ID : 832
Structure : Simple
Abstraction : Base
Description
The product attempts to unlock a resource that is not locked.
Extended Description
Depending on the locking functionality, an unlock of a non-locked resource might cause memory
corruption or other modification to the resource (or its associated metadata that is used for tracking
locks).
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 667 Improper Locking 1464
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 411 Resource Locking Problems 2325
Common Consequences
Scope Impact Likelihood
Integrity
Confidentiality
Availability
Other
DoS: Crash, Exit, or Restart
Execute Unauthorized Code or Commands
Modify Memory
Other
Depending on the locking being used, an unlock operation
might not have any adverse effects. When effects exist,
the most common consequence will be a corruption of
the state of the product, possibly leading to a crash or
exit; depending on the implementation of the unlocking,
memory corruption or code execution could occur.
Observed Examples
Reference Description
CVE-2010-4210 function in OS kernel unlocks a mutex that was not previously locked, causing
a panic or overwrite of arbitrary memory.
https://www.cve.org/CVERecord?id=CVE-2010-4210
CVE-2008-4302 Chain: OS kernel does not properly handle a failure of a function call
(CWE-755), leading to an unlock of a resource that was not locked (CWE-832),
with resultant crash.
https://www.cve.org/CVERecord?id=CVE-2008-4302
CVE-2009-1243 OS kernel performs an unlock in some incorrect circumstances, leading to
panic.
https://www.cve.org/CVERecord?id=CVE-2009-1243
MemberOf Relationships
CWE Version 4.14
CWE-833: Deadlock
CWE-833: Deadlock