CWE-401 · Missing Release of Memory after Effective Lifetime (page 12)
Page 12 of 20 — CVEs classified under CWE-401, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-42070 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register s… |
CVE-2024-41078 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix quota root leak after quota disable failure If during the quota disabl… |
CVE-2024-41076 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix memory leak in nfs4_set_security_label We leak nfs_fattr and nfs4_label every… |
CVE-2024-41066 | High | 7.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Add tx check to prevent skb leak Below is a summary of how the driver stores a r… |
CVE-2024-41025 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the… |
CVE-2024-41023 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution of the following stre… |
CVE-2024-41021 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() There is no support for HWPOISO… |
CVE-2024-41172 | High | 7.5 | 2024-07-19 | In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from b… |
CVE-2022-48863 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsp_pipeline_build() dsp_pipeline_build() allocates dup pointer… |
CVE-2022-48860 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemaclite_of_probe This node pointer is returned by of_pa… |
CVE-2022-48859 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr Th… |
CVE-2022-48856 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info The of_find_compatible_node() fun… |
CVE-2022-48855 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot reported a kernel infoleak [1] of 4 byt… |
CVE-2022-48846 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: block: release rq qos structures for queue without disk blkcg_init_queue() may add rq qos… |
CVE-2022-48809 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: fix a memleak when uncloning an skb dst and its metadata When uncloning an skb dst a… |
CVE-2022-48794 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: at86rf230: Stop leaking skb's Upon error the ieee802154_xmit_complete()… |
CVE-2022-48776 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doesn't free pparts wh… |
CVE-2022-48775 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() take… |
CVE-2024-41006 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netrom: Fix a memory leak in nr_heartbeat_expiry() syzbot reported a memory leak in nr_cr… |
CVE-2024-41002 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak for sec resource release The AIV is one of the SE… |
CVE-2024-41001 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: work around a potential audit memory leak kmemleak complains that there'… |
CVE-2024-40997 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix memory leak on CPU EPP exit The cpudata memory from kzalloc() in… |
CVE-2024-40979 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory i… |
CVE-2024-40942 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp code use objects of ty… |
CVE-2024-40936 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix memregion leaks in devm_cxl_add_region() Move the mode verification to __… |
CVE-2024-40934 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak o… |
CVE-2024-40932 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .get_modes() The duplicated EDID is never freed. Fix… |
CVE-2024-39550 | Medium | 6.5 | 2024-07-11 | A Missing Release of Memory after Effective Lifetime vulnerability in the rtlogd process of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthen… |
CVE-2024-39549 | High | 7.5 | 2024-07-11 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows… |
CVE-2024-39539 | Medium | 5.3 | 2024-07-11 | A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cau… |
CVE-2024-39536 | Medium | 5.3 | 2024-07-11 | A Missing Release of Memory after Effective Lifetime vulnerability in the Periodic Packet Management Daemon (ppmd) of Juniper Networks Junos OS and Junos OS Ev… |
CVE-2024-39493 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine wheth… |
CVE-2024-39490 | Medium | 6.2 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix missing sk_buff release in seg6_input_core The seg6_input() function is res… |
CVE-2024-39489 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning… |
CVE-2024-3653 | Medium | 5.3 | 2024-07-08 | A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the… |
CVE-2022-25479 | Medium | 5.5 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2024-38632 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfio_intx_enable() If vfio_irq_ctx_alloc() failed… |
CVE-2024-38388 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup Use the control private_free c… |
CVE-2022-48768 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an err… |
CVE-2022-48764 | Medium | 5.3 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} Free the "struct… |
CVE-2022-48763 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virt when SMM state is toggled Forcibly leave nested virt… |
CVE-2022-48753 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in disk_register_independent_access_ranges kobject_init_and_add()… |
CVE-2022-48724 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() After commit e3beca4… |
CVE-2022-48722 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_xmit_complete() hel… |
CVE-2021-47585 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in __add_inode_ref() Line 1169 (#3) allocates a memory chunk for v… |
CVE-2024-38611 | High | 7.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: et8ek8: Don't strip remove function when driver is builtin Using __exit for t… |
CVE-2024-38603 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() pci_alloc_irq_vectors()… |
CVE-2024-38563 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature Without th… |
CVE-2024-38539 | High | 7.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw When runni… |
CVE-2024-36967 | Medium | 5.5 | 2024-06-08 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2_key_encode() 'scratch' is never freed. Fix this by… |
CVE-2024-36954 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix a possible memleak in tipc_buf_append __skb_linearize() doesn't free the skb wh… |
CVE-2024-36947 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: qibfs: fix dentry leak simple_recursive_removal() drops the pinning references to all pos… |
CVE-2024-36946 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in th… |
CVE-2024-36945 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smc_ib_find_route() In smc_ib_find_route(), the… |
CVE-2024-36911 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host… |
CVE-2024-36909 | Critical | 9.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it… |
CVE-2023-52711 | High | 7.8 | 2024-05-28 | Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previou… |
CVE-2021-47570 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: fix a memory leak in rtw_wx_read32() Free "ptmp" before returning -EINV… |
CVE-2021-47568 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in get_file_stream_info() Fix memleak in get_file_stream_info() |
CVE-2021-47550 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init… |
CVE-2021-47546 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix memory leak in fib6_rule_suppress The kernel leaks memory when a `fib` rule is… |
CVE-2021-47539 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() Need to call rxrpc_put_peer() for bu… |
CVE-2021-47538 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for pee… |
CVE-2021-47537 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix a memleak bug in rvu_mbox_init() In rvu_mbox_init(), mbox_regions is no… |
CVE-2021-47532 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/devfreq: Fix OPP refcnt leak |
CVE-2021-47529 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Fix memory leaks in error handling path Should an error occur (invalid TLV len o… |
CVE-2021-47527 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: serial: core: fix transmit-buffer reset and memleak Commit 761ed4a94582 ("tty: serial_cor… |
CVE-2021-47524 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocate… |
CVE-2021-47523 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr This buffer is currently allocated in hfi1_i… |
CVE-2021-47519 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_read_fifo: fix memory leak in error branch In m_can_read_fifo(), if the… |
CVE-2021-47516 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: nfp: Fix memory leak in nfp_cpp_area_cache_add() In line 800 (#1), nfp_cpp_area_alloc() a… |
CVE-2021-47513 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering Avoid a memory leak if the… |
CVE-2021-47508 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: free exchange changeset on failures Fstests runs on my VMs have show several kmeml… |
CVE-2021-47499 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove When ACPI type is AC… |
CVE-2024-5294 | Medium | 6.5 | 2024-05-23 | D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a deni… |
CVE-2021-47490 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix memleak in ttm_transfered_destroy We need to cleanup the fences for ghost ob… |
CVE-2021-47473 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() Commit 8c0eb59… |
CVE-2021-47466 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmem_cache_open() In error path, the random_seq of… |
CVE-2021-47455 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: ptp: Fix possible memory leak in ptp_clock_register() I got memory leak as follows when d… |
CVE-2021-47453 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: ice: Avoid crash from unnecessary IDA free In the remove path, there is an attempt to fre… |
CVE-2021-47443 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() 'params' is allocated… |
CVE-2021-47442 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: NFC: digital: fix possible memory leak in digital_in_send_sdd_req() 'skb' is allocated in… |
CVE-2021-47438 | High | 7.1 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path Prior to this patch in ca… |
CVE-2023-52841 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: mux: Add check and kfree for kstrdup Add check for the return value of kstr… |
CVE-2023-52754 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resource for the second interface imon driver probes t… |
CVE-2023-52747 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Restore allocated resources on failed copyout Fix a resource leak if an error oc… |
CVE-2023-52746 | Low | 2.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() int type = nla_… |
CVE-2023-52730 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdio_add_func() or sdio_ini… |
CVE-2023-52706 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpio_sim_remove_hogs() that lea… |
CVE-2023-52702 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() old_meter needs to be f… |
CVE-2022-48709 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ice: switch: fix potential memleak in ice_add_adv_recipe() When ice_add_special_words() f… |
CVE-2022-48706 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvf_mgmt_dev leaks memory if it is n… |
CVE-2021-47426 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Fix potential memory leak about jit_data Make sure to free jit_data through kf… |
CVE-2021-47425 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpi_i2c_find_adapter_by_… |
CVE-2021-47423 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/debugfs: fix file release memory leak When using single_open() for opening, s… |
CVE-2021-47422 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/kms/nv50-: fix file release memory leak When using single_open() for opening… |
CVE-2021-47420 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a potential ttm->sg memory leak Memory is allocated for ttm->sg by kmallo… |
CVE-2021-47417 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix memory leak in strset Free struct strset itself, not just its internal parts. |
CVE-2021-47416 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported memory leak in MDIO bus interface, the problem… |
CVE-2021-47405 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free raw_report buffers in usbhid_stop Free the unsent raw_report buffers wh… |