CyberSecBulletin

Operation on Resource in Wrong Phase of Lifetime

CWE-666

The product performs an operation on a resource at the wrong phase of the resource's lifecycle, which can lead to unexpected behaviors.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 9.8.

How this weakness is prevented

  • Architecture and Design: Follow the resource's lifecycle from creation to release.
  • Implementation: For each phase, it is important to follow the specifications outlined for how to operate on the resource and to ensure that the resource is in the expected phase. Otherwise, if a resource is in one phase but the operation is not valid for that phase (i.e., an incorrect phase of the resource's lifetime), then this can produce resultant weaknesses.

Latest Operation on Resource in Wrong Phase of Lifetime vulnerabilities

  • 9.8 Critical severity

    Linux: Operation on Resource in Wrong Phase of Lifetime

    CVE-2026-64162Linux

    In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initialized after ptp_schedule_worker() had already been called (and after idpf_ptp_settim