Threats Tagged 'cwe-667'

concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another thread. A second writer can then enter its critical section while the first writer is still running. Concurrent::ReadWriteLock#release_read_lock also decrements the shared counter even when no read lock is held. Calling it on a fresh lock changes the counter from 0 to -1, after which normal read acquisition raises Concurrent::ResourceLimitError. This is a synchronization correctness issue in the public Concurrent::ReadWriteLock API. This vulnerability is fixed in 1.3.7.

CVE-2026-24182 is a medium severity vulnerability in NVIDIA GeForce display drivers for Windows and Linux. It involves improper locking that could allow an attacker to leak held driver locks. Exploitation of this flaw may result in a denial of service condition. The issue affects all driver versions prior to 595.71.05. No official patch or remediation guidance has been confirmed yet. There are no known exploits in the wild at this time.