diff --git a/src/detect-mark.c b/src/detect-mark.c
index b2326f98dc..83fa09690a 100644
--- a/src/detect-mark.c
+++ b/src/detect-mark.c
@@ -223,6 +223,7 @@ int DetectMarkPacket(ThreadVars *t, DetectEngineThreadCtx *det_ctx, Packet *p, S
     const DetectMarkData *nf_data = (const DetectMarkData *)ctx;
     if (nf_data->mask) {
         if (!(IS_TUNNEL_PKT(p))) {
+            /* coverity[missing_lock] */
             p->nfq_v.mark = (nf_data->mark & nf_data->mask)
                 | (p->nfq_v.mark & ~(nf_data->mask));
             p->flags |= PKT_MARK_MODIFIED;
diff --git a/src/source-nfq.c b/src/source-nfq.c
index 2c82f591fb..749bf2d1ca 100644
--- a/src/source-nfq.c
+++ b/src/source-nfq.c
@@ -433,6 +433,7 @@ int NFQSetupPkt (Packet *p, struct nfq_q_handle *qh, void *data)
         //p->nfq_v.hw_protocol = ntohs(p->nfq_v.ph->hw_protocol);
         p->nfq_v.hw_protocol = ph->hw_protocol;
     }
+    /* coverity[missing_lock] */
     p->nfq_v.mark = nfq_get_nfmark(tb);
     if (nfq_config.mode == NFQ_REPEAT_MODE) {
         if ((nfq_config.mark & nfq_config.mask) ==
@@ -523,6 +524,7 @@ static int NFQBypassCallback(Packet *p)
         }
         return 0;
     } else {
+        /* coverity[missing_lock] */
         p->nfq_v.mark = (nfq_config.bypass_mark & nfq_config.bypass_mask)
                         | (p->nfq_v.mark & ~nfq_config.bypass_mask);
         p->flags |= PKT_MARK_MODIFIED;