The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
7,457 vulnerabilities with CWE-416
CVE-2026-7897
HIGH
Google Chrome < 148.0.7778.96 - Use-After-Free in Mobile via Crafted HTML Page
CVSS 7.5
CVE-2026-43237
HIGH
drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4
CVSS 7.8
CVE-2026-43236
HIGH
drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
CVSS 7.8
CVE-2026-43232
HIGH
net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
CVSS 8.8
CVE-2026-43203
HIGH
atm: fore200e: fix use-after-free in tasklets during device removal
CVSS 7.5
CVE-2026-43138
HIGH
reset: gpio: suppress bind attributes in sysfs
CVSS 7.8
CVE-2026-43111
HIGH
HID: roccat: fix use-after-free in roccat_report_event
CVSS 7.8
CVE-2026-43084
HIGH
netfilter: nfnetlink_queue: make hash table per queue
CVSS 7.8
CVE-2026-43076
HIGH
ocfs2: validate inline data i_size during inode read
CVSS 7.8
CVE-2026-23631
HIGH
redis-server Lua use-after-free may allow remote code execution
CVSS 8.1
CVE-2026-23479
HIGH
redis-server use-after-free in unblock client flow may allow remote code execution
CVSS 8.8
CVE-2026-43059
HIGH
Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
CVSS 7.8
CVE-2026-24082
HIGH
Qualcomm Automotive GPU - Use-After-Free
CVSS 7.8
CVE-2026-22166
HIGH
GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable
CVSS 8.1
CVE-2026-22165
HIGH
GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs
CVSS 8.1
CVE-2026-43056
HIGH
net: mana: fix use-after-free in add_adev() error path
CVSS 7.8
CVE-2026-43050
HIGH
Linux - Use-After-Free in ATM LEC via Race Condition in lec_atm_close
CVSS 7.0
CVE-2026-43049
HIGH
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
CVSS 7.8
CVE-2026-43027
HIGH
netfilter: nf_conntrack_helper: pass helper to expect cleanup
CVSS 7.8
CVE-2026-43019
HIGH
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
CVSS 7.8
CVE-2026-43018
HIGH
Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
CVSS 8.8
CVE-2026-43016
HIGH
bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
CVSS 7.8
CVE-2026-43015
HIGH
net: macb: fix clk handling on PCI glue driver removal
CVSS 7.8
CVE-2026-31769
HIGH
gpib: fix use-after-free in IO ioctl handlers
CVSS 7.8
CVE-2026-31758
HIGH
usb: usbtmc: Flush anchored URBs in usbtmc_release
CVSS 7.8
Details
Vulnerabilities
7,457
Exploit Likelihood
High