Operation on Resource in Wrong Phase of Lifetime
CWE-666
The product performs an operation on a resource at the wrong phase of the resource's lifecycle, which can lead to unexpected behaviors.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 9.8.
How this weakness is prevented
- Architecture and Design: Follow the resource's lifecycle from creation to release.
- Implementation: For each phase, it is important to follow the specifications outlined for how to operate on the resource and to ensure that the resource is in the expected phase. Otherwise, if a resource is in one phase but the operation is not valid for that phase (i.e., an incorrect phase of the resource's lifetime), then this can produce resultant weaknesses.
Latest Operation on Resource in Wrong Phase of Lifetime vulnerabilities
- 9.8 Critical severity
Linux: Operation on Resource in Wrong Phase of Lifetime
In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initialized after ptp_schedule_worker() had already been called (and after idpf_ptp_settim