CWE-401 · Missing Release of Memory after Effective Lifetime (page 11)
Page 11 of 19 — CVEs classified under CWE-401, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47677 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: exfat: resolve memory leak from exfat_create_upcase_table() If exfat_load_upcase_table re… |
CVE-2024-8376 | High | 7.5 | 2024-10-11 | In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of… |
CVE-2024-47493 | Medium | 6.5 | 2024-10-11 | A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of the Juniper Networks Junos OS on the MX Series plat… |
CVE-2024-8626 | High | 7.5 | 2024-10-08 | Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability… |
CVE-2024-43696 | Low | 3.3 | 2024-10-08 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak. |
CVE-2024-46779 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Free pvr_vm_gpuva after unlink This caused a measurable memory leak. Alt… |
CVE-2024-20304 | High | 8.6 | 2024-09-11 | A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust the… |
CVE-2024-7884 | High | 7.5 | 2024-09-05 | When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the caller to get the execution result. Internal… |
CVE-2024-44979 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix missing workqueue destroy in xe_gt_pagefault On driver reload we never free u… |
CVE-2024-44971 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() bcm_sf2_mdio_reg… |
CVE-2024-44969 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store… |
CVE-2024-44964 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leaks and crashes while performing a soft reset The second tagged commit… |
CVE-2024-44944 | Medium | 5.5 | 2024-08-30 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path… |
CVE-2024-43913 | High | 7.0 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: nvme: apple: fix device reference counting Drivers must call nvme_uninit_ctrl after a suc… |
CVE-2022-48934 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() ida_simple_get() returns… |
CVE-2022-48933 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memory leak during stateful obj update stateful objects can be… |
CVE-2022-48928 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: men_z188_adc: Fix a resource leak in an error handling path If iio_device_regis… |
CVE-2022-48924 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below memory… |
CVE-2022-48909 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution seq… |
CVE-2022-48907 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in ->remove() Once allocated the struct lcd2s_data is… |
CVE-2022-48905 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing the rese… |
CVE-2022-48904 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix I/O page table memory leak The current logic updates the I/O page table mo… |
CVE-2023-52914 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: add hash if ready poll request can't complete inline If we don't, then we… |
CVE-2023-52902 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: nommu: fix memory leak in do_mmap() error path The preallocation of the maple tree nodes… |
CVE-2023-52895 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: don't reissue in case of poll race on multishot request A previous commit… |
CVE-2022-48896 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pci_get_domain_bus_and_slot() says… |
CVE-2022-48890 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM storvsc_queuecommand() m… |
CVE-2022-48888 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path of_icc_get() alloc resou… |
CVE-2022-48885 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix potential memory leak in ice_gnss_tty_write() The ice_gnss_tty_write() return di… |
CVE-2024-43880 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_erp: Fix object nesting warning ACLs in Spectrum-2 and newer ASICs ca… |
CVE-2024-43871 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory l… |
CVE-2024-43870 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exit When a task is scheduled out, pending sigtrap deliveries a… |
CVE-2024-43869 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exec and file release The perf pending task work is never waite… |
CVE-2024-43861 | Medium | 5.5 | 2024-08-20 | In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip packets Free the unused skb when not ip pa… |
CVE-2024-43854 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by b… |
CVE-2024-42263 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the timestamp extension If fetching of userspace me… |
CVE-2024-42262 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the performance extension If fetching of userspace… |
CVE-2024-42477 | Medium | 5.3 | 2024-08-12 | llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may le… |
CVE-2024-42152 | High | 7.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a possible leak when destroy a ctrl during qp establishment In nvmet_sq_destro… |
CVE-2024-42070 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register s… |
CVE-2024-41078 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix quota root leak after quota disable failure If during the quota disabl… |
CVE-2024-41076 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix memory leak in nfs4_set_security_label We leak nfs_fattr and nfs4_label every… |
CVE-2024-41066 | High | 7.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Add tx check to prevent skb leak Below is a summary of how the driver stores a r… |
CVE-2024-41025 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the… |
CVE-2024-41023 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution of the following stre… |
CVE-2024-41021 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() There is no support for HWPOISO… |
CVE-2024-41172 | High | 7.5 | 2024-07-19 | In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from b… |
CVE-2022-48863 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsp_pipeline_build() dsp_pipeline_build() allocates dup pointer… |
CVE-2022-48860 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemaclite_of_probe This node pointer is returned by of_pa… |
CVE-2022-48859 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr Th… |
CVE-2022-48856 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info The of_find_compatible_node() fun… |
CVE-2022-48855 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot reported a kernel infoleak [1] of 4 byt… |
CVE-2022-48846 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: block: release rq qos structures for queue without disk blkcg_init_queue() may add rq qos… |
CVE-2022-48809 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: fix a memleak when uncloning an skb dst and its metadata When uncloning an skb dst a… |
CVE-2022-48794 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: at86rf230: Stop leaking skb's Upon error the ieee802154_xmit_complete()… |
CVE-2022-48776 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doesn't free pparts wh… |
CVE-2022-48775 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() take… |
CVE-2024-41006 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netrom: Fix a memory leak in nr_heartbeat_expiry() syzbot reported a memory leak in nr_cr… |
CVE-2024-41002 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak for sec resource release The AIV is one of the SE… |
CVE-2024-41001 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: work around a potential audit memory leak kmemleak complains that there'… |
CVE-2024-40997 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix memory leak on CPU EPP exit The cpudata memory from kzalloc() in… |
CVE-2024-40979 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory i… |
CVE-2024-40942 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp code use objects of ty… |
CVE-2024-40936 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix memregion leaks in devm_cxl_add_region() Move the mode verification to __… |
CVE-2024-40934 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak o… |
CVE-2024-40932 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .get_modes() The duplicated EDID is never freed. Fix… |
CVE-2024-39550 | Medium | 6.5 | 2024-07-11 | A Missing Release of Memory after Effective Lifetime vulnerability in the rtlogd process of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthen… |
CVE-2024-39549 | High | 7.5 | 2024-07-11 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows… |
CVE-2024-39539 | Medium | 5.3 | 2024-07-11 | A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cau… |
CVE-2024-39536 | Medium | 5.3 | 2024-07-11 | A Missing Release of Memory after Effective Lifetime vulnerability in the Periodic Packet Management Daemon (ppmd) of Juniper Networks Junos OS and Junos OS Ev… |
CVE-2024-39493 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine wheth… |
CVE-2024-39490 | Medium | 6.2 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix missing sk_buff release in seg6_input_core The seg6_input() function is res… |
CVE-2024-39489 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning… |
CVE-2024-3653 | Medium | 5.3 | 2024-07-08 | A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the… |
CVE-2022-25479 | Medium | 5.5 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2024-38632 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfio_intx_enable() If vfio_irq_ctx_alloc() failed… |
CVE-2024-38388 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup Use the control private_free c… |
CVE-2022-48768 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an err… |
CVE-2022-48764 | Medium | 5.3 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} Free the "struct… |
CVE-2022-48763 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virt when SMM state is toggled Forcibly leave nested virt… |
CVE-2022-48753 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in disk_register_independent_access_ranges kobject_init_and_add()… |
CVE-2022-48724 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() After commit e3beca4… |
CVE-2022-48722 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_xmit_complete() hel… |
CVE-2021-47585 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in __add_inode_ref() Line 1169 (#3) allocates a memory chunk for v… |
CVE-2024-38611 | High | 7.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: et8ek8: Don't strip remove function when driver is builtin Using __exit for t… |
CVE-2024-38603 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() pci_alloc_irq_vectors()… |
CVE-2024-38563 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature Without th… |
CVE-2024-38539 | High | 7.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw When runni… |
CVE-2024-36967 | Medium | 5.5 | 2024-06-08 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2_key_encode() 'scratch' is never freed. Fix this by… |
CVE-2024-36954 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix a possible memleak in tipc_buf_append __skb_linearize() doesn't free the skb wh… |
CVE-2024-36947 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: qibfs: fix dentry leak simple_recursive_removal() drops the pinning references to all pos… |
CVE-2024-36946 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in th… |
CVE-2024-36945 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smc_ib_find_route() In smc_ib_find_route(), the… |
CVE-2024-36911 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host… |
CVE-2024-36909 | Critical | 9.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it… |
CVE-2023-52711 | High | 7.8 | 2024-05-28 | Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previou… |
CVE-2021-47570 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: fix a memory leak in rtw_wx_read32() Free "ptmp" before returning -EINV… |
CVE-2021-47568 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in get_file_stream_info() Fix memleak in get_file_stream_info() |
CVE-2021-47550 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init… |
CVE-2021-47546 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix memory leak in fib6_rule_suppress The kernel leaks memory when a `fib` rule is… |