CWE-401

Medium likelihood

Missing Release of Memory after Effective Lifetime

Parent: CWE-772 - Missing Release of Resource after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

1,757 vulnerabilities with CWE-401
CVE-2022-50226 MEDIUM
Linux Kernel 4.16-5.10.172, 5.11-5.15.60, 5.16-5.18.17, 5.19.0-5.19.1 - Memory Leak via SEV IOCTL Interface
CVSS 5.5
CVE-2022-50201 MEDIUM
Linux Kernel 5.12-5.15.60, 5.16.0-5.18.17, 5.19.0-5.19.1 - Use-After-Free in security_read_state_kernel
CVSS 5.5
CVE-2022-50186 MEDIUM
Linux Kernel 5.17-5.18.17, 5.19.0-5.19.1 - Use-After-Free in ath11k htc_tx_completion
CVSS 5.5
CVE-2022-50175 MEDIUM
Linux Kernel 4.7-5.10.137, 5.11.0-5.15.61, 5.16.0-5.18.18, 5.19.0-5.19.2 - Use-After-Free in tw686x_video_init
CVSS 5.5
CVE-2022-50172 MEDIUM
Linux Kernel 4.20-5.10.136, 5.11-5.15.60, 5.16-5.18.17, 5.19.0-5.19.1 - Use-After-Free in mt76x02u MCU Message Handling
CVSS 5.5
CVE-2022-50170 MEDIUM
Linux Kernel - Use-After-Free in kunit_filter_tests
CVSS 5.5
CVE-2022-50146 MEDIUM
Linux Kernel 4.16-5.19.1 - Use-After-Free in PCI Endpoint Controller
CVSS 5.5
CVE-2022-50143 MEDIUM
Linux Kernel 5.2-5.19.1 - Use-After-Free in Intel TH Error Handling
CVSS 5.5
CVE-2022-50140 MEDIUM
Linux Kernel Use-After-Free in memstick/ms_block
CVSS 5.5
CVE-2022-50138 MEDIUM
Linux Kernel 4.9-5.10.137, 5.11-5.15.61, 5.16-5.18.18, 5.19-5.19.2 - Use-After-Free in RDMA/qedr MR Allocation
CVSS 5.5
CVE-2022-50134 MEDIUM
Linux Kernel - Use-After-Free in RDMA hfi1 setup_base_ctxt()
CVSS 5.5
CVE-2022-50110 MEDIUM
Linux Kernel 5.15.42-5.15.60, 5.16.0-5.18.17, 5.18.0-5.19.1 - Use-After-Free in Watchdog SP5100 TCO
CVSS 5.5
CVE-2022-50107 MEDIUM
Linux Kernel 5.17-5.17, 5.18-5.18.18, 5.19-5.19.2 - Use-After-Free in CIFS fscache
CVSS 5.5
CVE-2022-50088 MEDIUM
Linux Kernel 5.18-5.18.17, 5.19-5.19.1 - Use-After-Free in DAMON Reclaim Context Initialization
CVSS 5.5
CVE-2022-50076 MEDIUM
Linux Kernel 5.13.12-5.14 - Use-After-Free in CIFS Deferred Close
CVSS 5.5
CVE-2022-50074 MEDIUM
Linux Kernel Use-After-Free in aa_simple_write_to_buffer
CVSS 5.5
CVE-2022-50065 MEDIUM
Linux Kernel 4.18-5.19.4 - Use-After-Free in virtio_net XDP Frame Conversion
CVSS 5.5
CVE-2022-50060 MEDIUM
Linux Kernel 5.0-5.15.63, 5.16.0-5.19.4, >=6.0 - Use-After-Free in octeontx2-af MCAM Entry Handling
CVSS 5.5
CVE-2022-50046 MEDIUM
Linux Kernel 5.14-5.14, 5.15.63-5.15.*, 5.16-5.19.4, 6.0 - Use-After-Free in rpc_sysfs_xprt_state_change
CVSS 5.5
CVE-2022-50042 MEDIUM
Linux Kernel 5.10-5.10.138, 5.11-5.15.63, 5.16-5.19.4 - Use-After-Free in Netlink Policy Dumping
CVSS 5.5
CVE-2022-50027 MEDIUM
Linux Kernel 5.15-5.19.4 - Use-After-Free in SCSI LPFC CMF WQE Handling
CVSS 5.5
CVE-2022-50025 MEDIUM
Linux Kernel Use-After-Free in cxl AFU IRQ Allocation
CVSS 5.5
CVE-2022-49997 MEDIUM
Linux Kernel 5.4.128-5.5 - Use-After-Free in lantiq_xrx200 Buffer Handling
CVSS 5.5
CVE-2022-49996 MEDIUM
Linux Kernel - Use-After-Free in btrfs_get_dev_args_from_path
CVSS 5.5
CVE-2022-49994 MEDIUM
Linux Kernel 5.14-5.14, 5.15.64-5.15.*, 5.16-5.19.6, 5.19.*-6.0 - Use-After-Free in Bootmem Vmemmap Page Handling
CVSS 5.5
Details
Vulnerabilities 1,757
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits