CWE-416

High likelihood

Use After Free

Parent: CWE-825 - Expired Pointer Dereference

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

7,457 vulnerabilities with CWE-416
CVE-2026-43458 HIGH
serial: caif: hold tty->link reference in ldisc_open and ser_release
CVSS 7.8
CVE-2026-43447 HIGH
iavf: fix PTP use-after-free during reset
CVSS 7.8
CVE-2026-43440 HIGH
net/mana: Null service_wq on setup error to prevent double destroy
CVSS 7.8
CVE-2026-43438 HIGH
sched_ext: Remove redundant css_put() in scx_cgroup_init()
CVSS 7.8
CVE-2026-43437 HIGH
ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
CVSS 7.8
CVE-2026-43426 HIGH
usb: renesas_usbhs: fix use-after-free in ISR during device removal
CVSS 7.8
CVE-2026-43402 CRITICAL
kthread: consolidate kthread exit paths to prevent use-after-free
CVSS 9.8
CVE-2026-43388 HIGH
mm/damon/core: clear walk_control on inactive context in damos_walk()
CVSS 7.8
CVE-2026-43379 CRITICAL
ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
CVSS 9.8
CVE-2026-43378 CRITICAL
Linux - Use-After-Free in SMB2 Open Function
CVSS 9.8
CVE-2026-43376 CRITICAL
ksmbd: fix use-after-free by using call_rcu() for oplock_info
CVSS 9.8
CVE-2026-43374 HIGH
net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
CVSS 7.8
CVE-2026-43370 HIGH
Linux - Use-After-Free in drm/amdgpu VM Acquire
CVSS 7.8
CVE-2026-43339 HIGH
ipv6: prevent possible UaF in addrconf_permanent_addr()
CVSS 7.8
CVE-2026-43322 HIGH
Bluetooth: hci_sync: Fix UAF in le_read_features_complete
CVSS 8.8
CVE-2026-43303 HIGH
mm/page_alloc: clear page->private in free_pages_prepare()
CVSS 7.8
CVE-2026-8092 HIGH
Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2
CVSS 8.1
CVE-2026-8090 HIGH
Use-after-free in the DOM: Networking component
CVSS 7.3
CVE-2026-8016 HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2026-8002 HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in Audio
CVSS 8.8
CVE-2026-8001 HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in Printing
CVSS 8.3
CVE-2026-7991 HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in UI
CVSS 8.8
CVE-2026-7987 HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2026-7985 HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in GPU
CVSS 8.3
CVE-2026-7984 HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in ReadingMode
CVSS 8.8
Details
Vulnerabilities 7,457
Exploit Likelihood High