CWE-401

Medium likelihood

Missing Release of Memory after Effective Lifetime

Parent: CWE-772 - Missing Release of Resource after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

1,757 vulnerabilities with CWE-401
CVE-2023-52914 MEDIUM
Linux Kernel 6.0-6.1.6 - Use-After-Free in io_uring Poll Request Handling
CVSS 5.5
CVE-2023-52902 MEDIUM
Linux Kernel - Use-After-Free in do_mmap() Error Path
CVSS 5.5
CVE-2023-52895 MEDIUM
Linux Kernel 6.1.7 - Use-After-Free in io_uring Poll Multishot Request Handling
CVSS 5.5
CVE-2023-52711 HIGH
Huawei Curiem-WFG9B Firmware - Improper Access Control via Exposed SMI Handler
CVSS 7.8
CVE-2023-52841 MEDIUM
Linux Kernel 5.10-5.10.200 - Use-After-Free in vidtv Mux Component
CVSS 5.5
CVE-2023-52754 MEDIUM
Linux Kernel < 5.10.202 - Use-After-Free in imon Driver Second Interface Probe
CVSS 5.5
CVE-2023-52747 MEDIUM
Linux Kernel 4.15-4.19.273 - Use-After-Free in IB/hfi1 Resource Handling
CVSS 5.5
CVE-2023-52746 LOW
Linux Kernel 5.10-5.10.167 - Spectre v1 Gadget via xfrm_xlate32_attr() Array Index
CVSS 2.5
CVE-2023-52730 MEDIUM
Linux Kernel 2.6.33-4.14.306 - Use-After-Free in SDIO Function Initialization
CVSS 5.5
CVE-2023-52706 MEDIUM
Linux Kernel - Use-After-Free in GPIO Simulator Hog Removal
CVSS 5.5
CVE-2023-52702 MEDIUM
Linux Kernel 5.8-5.10.169 - Use-After-Free in OVS Meter Command Set
CVSS 5.5
CVE-2023-52698 MEDIUM
Linux Kernel 4.8-4.19.305 - Use-After-Free in netlbl_calipso_add_pass
CVSS 5.5
CVE-2023-52684 MEDIUM
Linux Kernel 6.7-6.7.2 - Use-After-Free in qseecom Error Paths
CVSS 5.5
CVE-2023-52681 MEDIUM
Linux Kernel < 6.7.2 - Use-After-Free in efivarfs
CVSS 5.5
CVE-2023-52670 MEDIUM
Linux kernel 4.13-4.19.307 - Use-After-Free in rpmsg_remove()
CVSS 5.5
CVE-2023-52663 MEDIUM
Linux Kernel - Use-After-Free in ASoC SOF AMD Driver
CVSS 5.5
CVE-2023-52662 MEDIUM
Linux Kernel 5.14 - Use-After-Free in vmw_gmrid_man_get_node
CVSS 5.5
CVE-2023-52661 MEDIUM
Linux Kernel 5.17-6.1.82 - Use-After-Free in DRM Tegra RGB Probe Error Handling
CVSS 5.5
CVE-2023-52653 MEDIUM
Linux Kernel 2.6.35-6.8.2 - Use-After-Free in SUNRPC gss_import_v2_context
CVSS 5.5
CVE-2023-52643 MEDIUM
Linux Kernel 5.13-5.15.148 - Use-After-Free in IIO Device Sysfs Registration
CVSS 5.5
CVE-2023-52610 MEDIUM
Linux Kernel 5.3 - Use-After-Free in act_ct Defragmentation
CVSS 5.5
CVE-2023-33086 HIGH
Qualcomm Modem and Networking Firmware - Denial of Service via IKEV2 Informational Requests
CVSS 7.5
CVE-2023-33084 HIGH
Qualcomm AR8035 Firmware - Denial of Service via DTLS Handshake IE Fragment Processing
CVSS 7.5
CVE-2023-52581 MEDIUM
Linux Kernel 6.5-6.5.5 - Use-After-Free in Netfilter nf_tables Element Expiration
CVSS 6.3
CVE-2023-52571 HIGH
Linux Kernel - Use-After-Free in rk817 Power Supply Driver
CVSS 7.1
Details
Vulnerabilities 1,757
Exploit Likelihood Medium