The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
7,457 vulnerabilities with CWE-416
CVE-2026-43458
HIGH
serial: caif: hold tty->link reference in ldisc_open and ser_release
CVSS 7.8
CVE-2026-43447
HIGH
iavf: fix PTP use-after-free during reset
CVSS 7.8
CVE-2026-43440
HIGH
net/mana: Null service_wq on setup error to prevent double destroy
CVSS 7.8
CVE-2026-43438
HIGH
sched_ext: Remove redundant css_put() in scx_cgroup_init()
CVSS 7.8
CVE-2026-43437
HIGH
ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
CVSS 7.8
CVE-2026-43426
HIGH
usb: renesas_usbhs: fix use-after-free in ISR during device removal
CVSS 7.8
CVE-2026-43402
CRITICAL
kthread: consolidate kthread exit paths to prevent use-after-free
CVSS 9.8
CVE-2026-43388
HIGH
mm/damon/core: clear walk_control on inactive context in damos_walk()
CVSS 7.8
CVE-2026-43379
CRITICAL
ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
CVSS 9.8
CVE-2026-43378
CRITICAL
Linux - Use-After-Free in SMB2 Open Function
CVSS 9.8
CVE-2026-43376
CRITICAL
ksmbd: fix use-after-free by using call_rcu() for oplock_info
CVSS 9.8
CVE-2026-43374
HIGH
net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
CVSS 7.8
CVE-2026-43370
HIGH
Linux - Use-After-Free in drm/amdgpu VM Acquire
CVSS 7.8
CVE-2026-43339
HIGH
ipv6: prevent possible UaF in addrconf_permanent_addr()
CVSS 7.8
CVE-2026-43322
HIGH
Bluetooth: hci_sync: Fix UAF in le_read_features_complete
CVSS 8.8
CVE-2026-43303
HIGH
mm/page_alloc: clear page->private in free_pages_prepare()
CVSS 7.8
CVE-2026-8092
HIGH
Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2
CVSS 8.1
CVE-2026-8090
HIGH
Use-after-free in the DOM: Networking component
CVSS 7.3
CVE-2026-8016
HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2026-8002
HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in Audio
CVSS 8.8
CVE-2026-8001
HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in Printing
CVSS 8.3
CVE-2026-7991
HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in UI
CVSS 8.8
CVE-2026-7987
HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in WebRTC
CVSS 8.8
CVE-2026-7985
HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in GPU
CVSS 8.3
CVE-2026-7984
HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in ReadingMode
CVSS 8.8
Details
Vulnerabilities
7,457
Exploit Likelihood
High