CWE-401 · Missing Release of Memory after Effective Lifetime (page 2)
Page 2 of 19 — CVEs classified under CWE-401, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-46679 | High | 7.5 | 2026-06-10 | libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating omissions in @libp2p/gossipsub allow an unauthent… |
CVE-2026-52904 | Medium | 5.5 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture removal failure When aperture_remove_confli… |
CVE-2026-41840 | Medium | 5.9 | 2026-06-09 | Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 thr… |
CVE-2026-46309 | High | 7.0 | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise Add validation in… |
CVE-2026-46303 | High | 8.2 | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() rea… |
CVE-2026-46289 | Critical | 9.8 | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fix bugs in… |
CVE-2026-45682 | Medium | 5.1 | 2026-06-02 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the custom CappedConcurrentHashMa… |
CVE-2026-47326 | Medium | 5.5 | 2026-05-28 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by… |
CVE-2026-46228 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix devres lifetime USB drivers bind to USB interfaces and any device managed… |
CVE-2026-46224 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure When drm_gpuvm_resv_ob… |
CVE-2026-46221 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated via kzalloc() in in… |
CVE-2026-46207 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for non-linear buffers For non-linear skbs, vi… |
CVE-2026-46201 | High | 7.8 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_init_obj() f… |
CVE-2026-46182 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace The hdr variable is al… |
CVE-2026-46178 | High | 7.8 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points out that mlx… |
CVE-2026-46171 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzalloc (host_context.vect… |
CVE-2026-46151 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblp_ctrl_msg() coll… |
CVE-2026-46147 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() Two bugs exist in… |
CVE-2026-46143 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens As prepare can be called mulitple t… |
CVE-2026-46141 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: fix kmemleak caused by incorrect chip_data lookup The kmemleak reports the… |
CVE-2026-46109 | Medium | 5.5 | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi… |
CVE-2026-44660 | High | 7.5 | 2026-05-27 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object a… |
CVE-2026-46103 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and any device managed… |
CVE-2026-46102 | High | 7.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted… |
CVE-2026-46087 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() Destroy the… |
CVE-2026-46083 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cleanup() if… |
CVE-2026-46074 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix memory leaks on probe failures Make sure to deregister the controller, di… |
CVE-2026-46065 | High | 7.8 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info Hold state of d… |
CVE-2026-46042 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix memory leaks in weighted_interleave_auto_store() weighted_interleave_au… |
CVE-2026-46038 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrl_cmd_bye() A node sends the BYE packet when it is… |
CVE-2026-46030 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device_node leak in mc_probe() of_parse_phandle() returns a device_no… |
CVE-2026-46021 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone governor cleanup issues If thermal_zone_device_register_w… |
CVE-2026-46019 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup atmel_aes_buff_init(… |
CVE-2026-46012 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response() Fix rxkad_verify_response() to free th… |
CVE-2026-46005 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix a resource leak in xfs_alloc_buftarg() In the error path, call fs_put_dax() to d… |
CVE-2026-45986 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccree - fix a memory leak in cc_mac_digest() Add cc_unmap_result() if cc_map_hash… |
CVE-2026-45981 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() `css_alloc_subchannel()… |
CVE-2026-45976 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in amdgpu_ras_init() When amdgpu_nbio_ras_sw_init() fails in… |
CVE-2026-45964 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path Commit 5940d1cf9f42 ("SUNRPC… |
CVE-2026-45961 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: gfs2: fix memory leaks in gfs2_fill_super error path Fix two memory leaks in the gfs2_fil… |
CVE-2026-45954 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() In au1200fb_drv_probe(), when… |
CVE-2026-45950 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() The starfive_aes_aea… |
CVE-2026-45948 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_ext_shift_extents() In ext4_ext_shift_extents(), if the ext… |
CVE-2026-45947 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() In amdgpu_acpi_enumerate_xcc()… |
CVE-2026-45941 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure get_burstcount() can… |
CVE-2026-45939 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: gpib: Fix memory leak in ni_usb_init() In ni_usb_init(), if ni_usb_setup_init() fails, th… |
CVE-2026-45928 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix memory leak on codec_info allocation failure In wave5_vpu_… |
CVE-2026-45926 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: rust: pwm: Fix potential memory leak on init error When initializing a PWM chip using pwm… |
CVE-2026-45922 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler The UVERBS_HANDLER(MLX5_… |
CVE-2026-45921 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() The function mtd_pa… |
CVE-2026-45908 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix memory leak in amdxdna_ubuf_map The amdxdna_ubuf_map() function alloca… |
CVE-2026-45900 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix netdev memory leak in dpaa2_caam_probe When commit 0e1a4d427f58 ("cryp… |
CVE-2026-45888 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix memory leak in raid1_run() raid1_run() calls setup_conf() which registers a… |
CVE-2026-45887 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix memleak of newsk in unix_stream_connect(). When prepare_peercred() fails in… |
CVE-2026-45883 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: iio: sca3000: Fix a resource leak in sca3000_probe() spi->irq from request_threaded_irq()… |
CVE-2026-45881 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() In svs_enable_debug_write… |
CVE-2026-45875 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure The w… |
CVE-2026-45872 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() pqi_report_phys_luns() fails to… |
CVE-2026-45870 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths The gssx_dec_ctx(), gssx_d… |
CVE-2026-45863 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() The dw_i3c_master_i2c_xfers() funct… |
CVE-2025-71312 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super() In ntfs_fill_super(), the fc->… |
CVE-2026-9572 | Low | 3.3 | 2026-05-26 | A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomedia/media.c of the… |
CVE-2026-35424 | High | 7.5 | 2026-05-12 | Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a netwo… |
CVE-2026-34089 | High | 7.5 | 2026-05-11 | Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45.0 before 1.45.2. |
CVE-2026-43457 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: mctp: i2c: fix skb memory leak in receive path When 'midev->allow_rx' is false, the newly… |
CVE-2026-43451 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path nfqnl_recv_verdic… |
CVE-2026-43445 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX b… |
CVE-2026-43432 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a comman… |
CVE-2026-43419 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code path… |
CVE-2026-43397 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: samsung-dsim: Fix memory leak in error path In samsung_dsim_host_attach(), dr… |
CVE-2026-43396 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Fix user fence leak on alloc failure When dma_fence_chain_alloc() fails, pro… |
CVE-2026-43394 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). nfsd_nl_listener_set_doit() uses… |
CVE-2026-43393 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() Fix a c… |
CVE-2026-43375 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a reference to the USB inte… |
CVE-2026-43373 | High | 7.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: net: ncsi: fix skb leak in error paths Early return paths in NCSI RX and AEN handlers fai… |
CVE-2026-43371 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: net: macb: Shuffle the tx ring before enabling tx Quanyang observed that when using an NF… |
CVE-2026-43355 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pm_runtime_put_autosuspend() b… |
CVE-2026-43317 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak… |
CVE-2026-43287 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DRM_IOCTL_MODE_CREATEPROPBLOB allows user… |
CVE-2026-43286 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore failed global reservations to subpool Commit a833a693a490 ("mm: huget… |
CVE-2026-43269 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback After several com… |
CVE-2026-43262 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: gfs2: fiemap page fault fix In gfs2_fiemap(), we are calling iomap_fiemap() while holding… |
CVE-2026-43246 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9906: Fix potential memory leak in tw9906_probe() In one of the error paths… |
CVE-2026-43244 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: kcm: fix zero-frag skb in frag_list on partial sendmsg error Syzkaller reported a warning… |
CVE-2026-43242 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: soc: ti: k3-socinfo: Fix regmap leak on probe failure The mmio regmap allocated during pr… |
CVE-2026-43231 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: radio-keene: fix memory leak in error path Fix a memory leak in usb_keene_probe()… |
CVE-2026-43225 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211_inform_bss_frame() may retur… |
CVE-2026-43224 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix sgtable leak on mapping failures In an unlikely case when io_populate_… |
CVE-2026-43223 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_request_ex When pvr2_send_request_ex() submits… |
CVE-2026-43218 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9903: Fix potential memory leak in tw9903_probe() In one of the error paths… |
CVE-2026-43217 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: iris: gen2: Add sanity check for session stop In iris_kill_session, inst->state is… |
CVE-2026-43183 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: cx25821: Fix a resource leak in cx25821_dev_setup() Add release_mem_region() if io… |
CVE-2026-43165 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin When calling of_parse_p… |
CVE-2026-43162 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: tegra-video: Fix memory leak in __tegra_channel_try_format() The state object allo… |
CVE-2026-43157 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and t… |
CVE-2026-43155 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: mux: mmio: fix regmap leak on probe failure The mmio regmap that may be allocated during… |
CVE-2026-43145 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix invalid loaded resource table detection imx_rproc_elf_find_loa… |
CVE-2026-43142 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases… |
CVE-2025-71290 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: misc: ti_fpc202: fix a potential memory leak in probe function Use for_each_child_of_node… |
CVE-2025-71288 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leaks on common probe Make sure to drop the reference taken w… |