The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
8,043 vulnerabilities with CWE-416
CVE-2026-53120
HIGH
PCI: use generic driver_override infrastructure
CVSS 7.8
CVE-2026-53119
HIGH
platform/wmi: use generic driver_override infrastructure
CVSS 7.8
CVE-2026-53118
HIGH
vdpa: use generic driver_override infrastructure
CVSS 7.8
CVE-2026-53117
HIGH
s390/cio: use generic driver_override infrastructure
CVSS 7.8
CVE-2026-53116
HIGH
s390/ap: use generic driver_override infrastructure
CVSS 7.8
CVE-2026-53115
HIGH
bus: fsl-mc: use generic driver_override infrastructure
CVSS 7.8
CVE-2026-53112
HIGH
wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet
CVSS 7.8
CVE-2026-53109
HIGH
powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy
CVSS 7.8
CVE-2026-53098
HIGH
wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()
CVSS 7.8
CVE-2026-53097
HIGH
wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work()
CVSS 7.8
CVE-2026-53089
HIGH
bpf: Fix use-after-free in offloaded map/prog info fill
CVSS 7.8
CVE-2026-53085
HIGH
bpf: fix mm lifecycle in open-coded task_vma iterator
CVSS 7.8
CVE-2026-53071
HIGH
Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
CVSS 8.8
CVE-2026-53055
CRITICAL
crypto: hisilicon/sec2 - prevent req used-after-free for sec
CVSS 9.8
CVE-2026-53046
CRITICAL
ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine
CVSS 9.8
CVE-2026-53040
HIGH
ocfs2: validate bg_bits during freefrag scan
CVSS 7.1
CVE-2026-53033
HIGH
bpf, sockmap: Take state lock for af_unix iter
CVSS 7.8
CVE-2026-53025
HIGH
greybus: raw: fix use-after-free on cdev close
CVSS 7.8
CVE-2026-53024
HIGH
Linux - Use After Free
CVSS 7.8
CVE-2026-53011
HIGH
net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
CVSS 7.8
CVE-2026-53010
CRITICAL
ksmbd: fix use-after-free in smb2_open during durable reconnect
CVSS 9.8
CVE-2026-53009
HIGH
Linux Kernel ice - tx_buf skb Double Free
CVSS 7.8
CVE-2026-53006
CRITICAL
ipv6: fix possible UAF in icmpv6_rcv()
CVSS 9.8
CVE-2026-53005
HIGH
af_unix: Drop all SCM attributes for SOCKMAP.
CVSS 7.8
CVE-2026-52982
CRITICAL
net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
CVSS 9.8
Details
Vulnerabilities
8,043
Exploit Likelihood
High