diff --git a/src/rgw/driver/sfs/sqlite/dbconn.h b/src/rgw/driver/sfs/sqlite/dbconn.h
index d2bec57b25c2ef..052ef2ffdc1968 100644
--- a/src/rgw/driver/sfs/sqlite/dbconn.h
+++ b/src/rgw/driver/sfs/sqlite/dbconn.h
@@ -263,6 +263,7 @@ class DBConn {
   sqlite3* first_sqlite_conn;
   CephContext* const cct;
   const bool profile_enabled;
+  ceph::mutex lock = ceph::make_mutex("sfs_db_lock");
 
   DBConn(CephContext* _cct);
   virtual ~DBConn() = default;
diff --git a/src/rgw/driver/sfs/sqlite/sqlite_buckets.cc b/src/rgw/driver/sfs/sqlite/sqlite_buckets.cc
index d2080c9b8aed7e..47cdd50170946a 100644
--- a/src/rgw/driver/sfs/sqlite/sqlite_buckets.cc
+++ b/src/rgw/driver/sfs/sqlite/sqlite_buckets.cc
@@ -142,6 +142,9 @@ std::optional<DBDeletedObjectItems> SQLiteBuckets::delete_bucket_transact(
   RetrySQLite<DBDeletedObjectItems> retry([&]() {
     bucket_deleted = false;
     DBDeletedObjectItems ret_values;
+    std::lock_guard l(conn->lock);
+    // FIXME: looks like this transaction will never rollback/commit if anything below throws.
+    // FIXME: I assume this wants to be storage.transaction_guard()?
     storage.begin_transaction();
     // first get all the objects and versions for that bucket
     ret_values = storage.select(
diff --git a/src/rgw/driver/sfs/sqlite/sqlite_multipart.cc b/src/rgw/driver/sfs/sqlite/sqlite_multipart.cc
index aad59684bef06c..df9169b75b273b 100644
--- a/src/rgw/driver/sfs/sqlite/sqlite_multipart.cc
+++ b/src/rgw/driver/sfs/sqlite/sqlite_multipart.cc
@@ -92,6 +92,7 @@ int SQLiteMultipart::abort_multiparts_by_bucket_id(const std::string& bucket_id
 ) const {
   auto& storage = conn->get_storage();
   uint64_t num_changes = 0;
+  std::lock_guard l(conn->lock);
   storage.transaction([&]() mutable {
     storage.update_all(
         set(c(&DBMultipart::state) = MultipartState::ABORTED,
@@ -222,7 +223,7 @@ std::optional<DBMultipartPart> SQLiteMultipart::create_or_reset_part(
 ) const {
   auto& storage = conn->get_storage();
   std::optional<DBMultipartPart> entry = std::nullopt;
-
+  std::lock_guard l(conn->lock);
   storage.transaction([&]() mutable {
     auto cnt = storage.count<DBMultipart>(where(
         is_equal(&DBMultipart::upload_id, upload_id) and
@@ -299,6 +300,7 @@ bool SQLiteMultipart::finish_part(
     uint64_t bytes_written
 ) const {
   auto& storage = conn->get_storage();
+  std::lock_guard l(conn->lock);
   bool committed = storage.transaction([&]() mutable {
     storage.update_all(
         set(c(&DBMultipartPart::etag) = etag,
@@ -320,6 +322,7 @@ bool SQLiteMultipart::finish_part(
 
 bool SQLiteMultipart::abort(const std::string& upload_id) const {
   auto& storage = conn->get_storage();
+  std::lock_guard l(conn->lock);
   auto committed = storage.transaction([&]() mutable {
     storage.update_all(
         set(c(&DBMultipart::state) = MultipartState::ABORTED,
@@ -358,6 +361,7 @@ static int _mark_complete(
 
 bool SQLiteMultipart::mark_complete(const std::string& upload_id) const {
   auto& storage = conn->get_storage();
+  std::lock_guard l(conn->lock);
   auto committed = storage.transaction([&]() mutable {
     auto num_complete = _mark_complete(storage, upload_id);
     if (num_complete == 0) {
@@ -375,6 +379,7 @@ bool SQLiteMultipart::mark_complete(
 ) const {
   ceph_assert(duplicate != nullptr);
   auto& storage = conn->get_storage();
+  std::lock_guard l(conn->lock);
   auto committed = storage.transaction([&]() mutable {
     auto entries = storage.get_all<DBMultipart>(
         where(is_equal(&DBMultipart::upload_id, upload_id))
@@ -401,6 +406,7 @@ bool SQLiteMultipart::mark_complete(
 
 bool SQLiteMultipart::mark_aggregating(const std::string& upload_id) const {
   auto& storage = conn->get_storage();
+  std::lock_guard l(conn->lock);
   auto committed = storage.transaction([&]() mutable {
     storage.update_all(
         set(c(&DBMultipart::state) = MultipartState::AGGREGATING,
@@ -423,6 +429,7 @@ bool SQLiteMultipart::mark_aggregating(const std::string& upload_id) const {
 
 bool SQLiteMultipart::mark_done(const std::string& upload_id) const {
   auto& storage = conn->get_storage();
+  std::lock_guard l(conn->lock);
   auto committed = storage.transaction([&]() mutable {
     storage.update_all(
         set(c(&DBMultipart::state) = MultipartState::DONE,
@@ -464,6 +471,7 @@ SQLiteMultipart::remove_multiparts_by_bucket_id_transact(
   DBDeletedMultipartItems ret_parts;
   auto& storage = conn->get_storage();
   RetrySQLite<DBDeletedMultipartItems> retry([&]() {
+    std::lock_guard l(conn->lock);
     auto transaction = storage.transaction_guard();
     // get first the list of parts to be deleted up to max_items
     ret_parts = storage.select(
@@ -525,6 +533,7 @@ SQLiteMultipart::remove_done_or_aborted_multiparts_transact(uint max_items
   DBDeletedMultipartItems ret_parts;
   auto& storage = conn->get_storage();
   RetrySQLite<DBDeletedMultipartItems> retry([&]() {
+    std::lock_guard l(conn->lock);
     auto transaction = storage.transaction_guard();
     // get first the list of parts to be deleted up to max_items
     ret_parts = storage.select(
diff --git a/src/rgw/driver/sfs/sqlite/sqlite_versioned_objects.cc b/src/rgw/driver/sfs/sqlite/sqlite_versioned_objects.cc
index 95dc8885be389e..f95a2a9f23039f 100644
--- a/src/rgw/driver/sfs/sqlite/sqlite_versioned_objects.cc
+++ b/src/rgw/driver/sfs/sqlite/sqlite_versioned_objects.cc
@@ -119,6 +119,7 @@ bool SQLiteVersionedObjects::store_versioned_object_if_state(
     const DBVersionedObject& object, std::vector<ObjectState> allowed_states
 ) const {
   auto& storage = conn->get_storage();
+  std::lock_guard l(conn->lock);
   auto transaction = storage.transaction_guard();
   transaction.commit_on_destroy = true;
   storage.update_all(
@@ -148,6 +149,7 @@ bool SQLiteVersionedObjects::
     ) const {
   auto& storage = conn->get_storage();
   RetrySQLite<bool> retry([&]() {
+    std::lock_guard l(conn->lock);
     auto transaction = storage.transaction_guard();
     storage.update_all(
         set(c(&DBVersionedObject::object_id) = object.object_id,
@@ -299,6 +301,7 @@ SQLiteVersionedObjects::delete_version_and_get_previous_transact(
 ) const {
   try {
     auto& storage = conn->get_storage();
+    std::lock_guard l(conn->lock);
     auto transaction = storage.transaction_guard();
     std::optional<DBVersionedObject> ret_value = std::nullopt;
     storage.remove<DBVersionedObject>(id);
@@ -338,6 +341,7 @@ uint SQLiteVersionedObjects::add_delete_marker_transact(
   added = false;
   try {
     auto& storage = conn->get_storage();
+    std::lock_guard l(conn->lock);
     auto transaction = storage.transaction_guard();
     auto last_version_select = storage.get_all<DBVersionedObject>(
         where(
@@ -452,6 +456,7 @@ SQLiteVersionedObjects::create_new_versioned_object_transact(
 ) const {
   auto& storage = conn->get_storage();
   RetrySQLite<DBVersionedObject> retry([&]() {
+    std::lock_guard l(conn->lock);
     auto transaction = storage.transaction_guard();
     auto objs = storage.select(
         columns(&DBObject::uuid),
@@ -494,6 +499,7 @@ SQLiteVersionedObjects::remove_deleted_versions_transact(uint max_objects
   DBDeletedObjectItems ret_objs;
   auto& storage = conn->get_storage();
   RetrySQLite<DBDeletedObjectItems> retry([&]() {
+    std::lock_guard l(conn->lock);
     auto transaction = storage.transaction_guard();
     // get first the list of objects to be deleted up to max_objects
     // order by size so when we delete the versions data we are more efficient