CWE-401

Medium likelihood

Missing Release of Memory after Effective Lifetime

Parent: CWE-772 - Missing Release of Resource after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

1,757 vulnerabilities with CWE-401
CVE-2022-48846 MEDIUM
Linux Kernel 5.15-5.15.30, 5.16-5.16.16 - Use-After-Free in Block Queue Cleanup
CVSS 5.5
CVE-2022-48809 MEDIUM
Linux Kernel - Use-After-Free in SKB Destination Uncloning
CVSS 5.5
CVE-2022-48794 MEDIUM
Linux Kernel < 4.9.303 - Use-After-Free in at86rf230 IEEE 802.15.4 Tx Error Handling
CVSS 5.5
CVE-2022-48776 MEDIUM
Linux Kernel 5.12.17-5.13 - Use-After-Free in MTD Parser Cleanup
CVSS 5.5
CVE-2022-48775 MEDIUM
Linux Kernel Use-After-Free in vmbus_add_channel_kobj
CVSS 5.5
CVE-2022-25479 MEDIUM
Realtek RtsPer/RtsUer Kernel Memory Leak via PCIe/USB Drivers
CVSS 5.5
CVE-2022-48768 MEDIUM
Linux Kernel - Use-After-Free in Histogram Tracing via kstrdup Memory Leak
CVSS 5.5
CVE-2022-48764 MEDIUM
Linux Kernel 5.16.3-5.16.5 - Use-After-Free in KVM_SET_CPUID{,2}
CVSS 5.3
CVE-2022-48763 MEDIUM
Linux Kernel < 5.10.97 - Use-After-Free via KVM_SET_VCPU_EVENTS SMM State Toggle
CVSS 5.5
CVE-2022-48753 MEDIUM
Linux Kernel 5.16-5.16.4 - Use-After-Free in Independent Access Ranges Registration
CVSS 5.5
CVE-2022-48724 MEDIUM
Linux Kernel 4.14.190-4.14.265 - Use-After-Free in intel_setup_irq_remapping
CVSS 5.5
CVE-2022-48722 MEDIUM
Linux Kernel 4.12-5.16.8 Use-After-Free in IEEE 802.15.4 CA8210 Xmit Error Handling
CVSS 5.5
CVE-2022-48709 MEDIUM
Linux Kernel 5.16-6.1.11 - Use-After-Free in ice_add_adv_recipe
CVSS 5.5
CVE-2022-48706 MEDIUM
Linux Kernel < 6.1.13 - Use-After-Free in ifcvf_mgmt_dev
CVSS 5.5
CVE-2022-48690 MEDIUM
Linux Kernel 5.16-5.19.9 - Use-After-Free in ICE Driver DMA Mapping
CVSS 5.5
CVE-2022-48699 MEDIUM
Linux Kernel 5.13-5.15.68, 5.16-5.19.9 - Use-After-Free in Scheduler Debugfs
CVSS 5.5
CVE-2022-48698 MEDIUM
Linux Kernel < 5.15.68 - Use-After-Free in DRM AMD Display DebugFS Lookup
CVSS 5.3
CVE-2022-48693 MEDIUM
Linux Kernel 4.15-4.19.258 4.20-5.4.213 5.5-5.10.143 5.11-5.15.68 5.16-5.19.9 - Use-After-Free in brcmstb_pm_probe
CVSS 5.5
CVE-2022-48691 MEDIUM
Linux Kernel 5.5-5.10.142 5.11-5.15.67 5.16-5.19.8 - Use-After-Free in nf_tables Hook List Cleanup
CVSS 5.5
CVE-2022-48669 MEDIUM
Linux Kernel 5.18-6.1.82, 6.2-6.6.22, 6.7-6.7.10, 6.8-6.8.1 - Use-After-Free in papr_get_attr
CVSS 5.5
CVE-2022-48656 MEDIUM
Linux Kernel 5.6-5.19.12 - Use-After-Free in DMA Engine of_xudma_dev_get
CVSS 5.5
CVE-2022-48650 MEDIUM
Linux Kernel 5.11-5.15.70 - Use-After-Free in qla2xxx SCSI Driver
CVSS 4.7
CVE-2022-48642 MEDIUM
Linux Kernel 5.3-5.9 - Use-After-Free in nf_tables_addchain
CVSS 5.5
CVE-2022-48641 MEDIUM
Linux Kernel Use-After-Free in ebtables Blob Handling
CVSS 5.5
CVE-2022-23091 MEDIUM
FreeBSD < 12.3 - Unprivileged Memory Access via Virtual Memory System Mishandling
CVSS 4.0
Details
Vulnerabilities 1,757
Exploit Likelihood Medium