CWE-765 (关键资源的多重解锁) — Vulnerability Class 1

CWE-765 represents a concurrency weakness where a software component releases a critical resource lock more times than it was acquired, resulting in an unexpected and potentially unstable system state. This flaw typically arises in multi-threaded environments where improper synchronization logic causes duplicate unlock operations on mutexes, semaphores, or other locking mechanisms. Exploitation often leads to race conditions, data corruption, or denial of service, as the resource may become available to unauthorized threads prematurely or cause the system to crash due to invalid state transitions. Developers mitigate this risk by ensuring strict adherence to lock acquisition and release patterns, utilizing RAII (Resource Acquisition Is Initialization) principles to automate resource management, and implementing comprehensive unit tests that simulate concurrent access scenarios to verify that locks are balanced correctly under stress.