CWE-401 · Missing Release of Memory after Effective Lifetime (page 3)
Page 3 of 19 — CVEs classified under CWE-401, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-71287 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leak on larb probe Make sure to drop the reference taken when… |
CVE-2025-71273 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() Simplify the code by using de… |
CVE-2025-71272 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: most: core: fix resource leak in most_register_interface error paths The function most_re… |
CVE-2026-43105 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix memory leak of BO array in hang state The hang state's BO array is allocated… |
CVE-2026-43104 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix a memory leak in hang state error path When vc4_save_hang_state() encounters… |
CVE-2026-43102 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix memory leak in airoha_qdma_rx_process() If an error occurs on the subseq… |
CVE-2026-43089 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding… |
CVE-2026-43074 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free… |
CVE-2026-43069 | Medium | 5.5 | 2026-05-05 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ll: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hci… |
CVE-2026-43068 | Medium | 5.5 | 2026-05-05 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() There's issue a… |
CVE-2026-43066 | Medium | 5.5 | 2026-05-05 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths During code review, Joseph f… |
CVE-2026-43506 | Medium | 5.3 | 2026-05-01 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory l… |
CVE-2026-43041 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak __radix_tree_cr… |
CVE-2026-43021 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails When hci_cmd_sync_queue… |
CVE-2026-31762 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few l… |
CVE-2026-31760 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpib: lpvo_usb: fix memory leak on disconnect The driver iterates over the registered USB… |
CVE-2026-31757 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: Fix URB memory leak on submit failure When usb_submit_urb() fails in us… |
CVE-2026-31750 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: runflags cannot determine whether to reclaim chanlist syzbot reported a memory le… |
CVE-2026-31746 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix memory leak with CCA cards used as accelerator Tests showed that there i… |
CVE-2026-31732 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() Since commit aab5c6f20… |
CVE-2026-31714 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid memory leak in f2fs_rename() syzbot reported a f2fs bug as below: BUG… |
CVE-2026-31711 | High | 7.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix active_num_conn leak on transport allocation failure Commit 77ffbcac4e56… |
CVE-2026-7379 | Medium | 5.5 | 2026-04-30 | Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CVE-2026-31672 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00usb: fix devres lifetime USB drivers bind to USB interfaces and any device ma… |
CVE-2026-31671 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_report() struct xfrm_user_report is a __u8 proto field… |
CVE-2026-31658 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_singl… |
CVE-2026-31654 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in __mmap_region() commit 605f6586ecf7 ("mm/vma: do not leak memo… |
CVE-2026-31645 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page pool leak in error paths lan966x_fdma_rx_alloc() creates a page po… |
CVE-2026-31643 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key parsing memleak In rxrpc_preparse_xdr_yfs_rxgk(), the memory attached to t… |
CVE-2026-31640 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial In rxrpc_post_res… |
CVE-2026-31632 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of rxgk context in rxgk_verify_response() Fix rxgk_verify_response() to c… |
CVE-2026-31616 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() A broken/bored/mean U… |
CVE-2026-31610 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc The kernel ASN.1 BER… |
CVE-2026-31604 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix device leak on probe failure Driver core holds a reference to the USB in… |
CVE-2026-31585 | Medium | 5.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix nfeeds state corruption on start_streaming failure syzbot reported a me… |
CVE-2026-31529 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in __construct_region() Failing the first sysfs_update_group() ne… |
CVE-2026-31524 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was… |
CVE-2026-31522 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_report_fixup() The magicmouse_report_fix… |
CVE-2026-31520 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup() The apple_report_fixup() function w… |
CVE-2026-31518 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full… |
CVE-2026-31517 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly In iptfs_reassem_con… |
CVE-2026-31461 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drm_edid leak in amdgpu_dm [WHAT] When a sink is connected, aconnect… |
CVE-2026-31459 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm… |
CVE-2026-31441 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset idxd_wq_disable_cleanup() which is ca… |
CVE-2026-31440 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the devic… |
CVE-2026-31434 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group space_info When create_space_info_sub_group… |
CVE-2026-31429 | Medium | 5.5 | 2026-04-20 | In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKB_SMALL_HEAD_CACHE_SIZE is… |
CVE-2026-40336 | Low | 2.4 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in `ptp_unpack_Sony_DPD()` in `camlibs/ptp2/ptp-pack… |
CVE-2026-33782 | Medium | 6.5 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, u… |
CVE-2026-33780 | Medium | 6.5 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evo… |
CVE-2026-33775 | Medium | 6.5 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS o… |
CVE-2026-34052 | Medium | 5.9 | 2026-04-03 | LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictiona… |
CVE-2026-31400 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix cache_request leak in cache_release When a reader's file descriptor is closed… |
CVE-2026-31390 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xe_vm_madvise_ioctl When check_bo_args_are_sane() validation f… |
CVE-2026-23464 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() In mpfs_sys_controll… |
CVE-2026-23453 | High | 7.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode Page recycling… |
CVE-2026-23444 | High | 7.8 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure ieee80211_tx_prepar… |
CVE-2026-23431 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_probe(), ctlr is al… |
CVE-2026-23430 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's d… |
CVE-2026-23423 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: btrfs: free pages on error in btrfs_uring_read_extent() In this function the 'pages' obje… |
CVE-2026-23418 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Fix leak on xa_store failure Free the newly allocated entry when xa_store(… |
CVE-2026-23414 | High | 7.5 | 2026-04-02 | In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait() The async_hold queue pins encrypted inp… |
CVE-2026-23403 | Medium | 5.5 | 2026-04-01 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call… |
CVE-2026-21714 | Medium | 5.3 | 2026-03-30 | A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to ex… |
CVE-2026-23399 | Medium | 5.5 | 2026-03-28 | In the Linux kernel, the following vulnerability has been resolved: nf_tables: nft_dynset: fix possible stateful expression memleak in error path If cloning… |
CVE-2026-3650 | High | 7.5 | 2026-03-26 | A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta informat… |
CVE-2026-4247 | High | 7.5 | 2026-03-26 | When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should… |
CVE-2026-20012 | High | 8.6 | 2026-03-25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Ap… |
CVE-2026-3104 | High | 7.5 | 2026-03-25 | A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 thro… |
CVE-2026-23389 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in ice_set_ringparam() In ice_set_ringparam, tx_rings and xdp_rings… |
CVE-2026-23384 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() struct ionic_cq_resp resp { __… |
CVE-2026-23360 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called… |
CVE-2026-23352 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efi_free_boot_services() frees memory occu… |
CVE-2026-23350 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/queue: Call fini on exec queue creation fail Every call to queue init should have… |
CVE-2026-23339 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive() takes ownership o… |
CVE-2026-23337 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf… |
CVE-2026-23335 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() struct irdma_create_ah_resp {… |
CVE-2026-23330 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete… |
CVE-2026-23297 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). syzbot reported memory leak of str… |
CVE-2026-33852 | High | 7.5 | 2026-03-24 | Missing Release of Memory after Effective Lifetime vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
CVE-2026-33856 | High | 7.5 | 2026-03-24 | Missing Release of Memory after Effective Lifetime vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
CVE-2026-32874 | High | 7.5 | 2026-03-20 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.4.0 through 5.11.0 contain an accumulating memory leak… |
CVE-2026-30873 | Medium | 4.9 | 2026-03-19 | OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to both 24.10.6 and 25.12.1, the jp_get_token function, which perform… |
CVE-2026-23263 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix page array leak d9f595b9a65e ("io_uring/zcrx: fix leaking pages on sg… |
CVE-2026-23261 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvme_fabrics creates an NVMe/FC controller in… |
CVE-2026-23260 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: regmap: maple: free entry on mas_store_gfp() failure regcache_maple_write() allocates a n… |
CVE-2026-23258 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setup_nic_devices(), the n… |
CVE-2025-71268 | High | 7.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent If we fail t… |
CVE-2026-0639 | Low | 3.3 | 2026-03-16 | in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory. |
CVE-2024-14027 | Medium | 5.5 | 2026-03-09 | In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexatt… |
CVE-2026-1605 | High | 7.5 | 2026-03-05 | In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: g… |
CVE-2026-20021 | Medium | 4.3 | 2026-03-04 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Softwar… |
CVE-2026-20106 | Medium | 5.3 | 2026-03-04 | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Se… |
CVE-2026-20105 | High | 7.7 | 2026-03-04 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defen… |
CVE-2026-20015 | Medium | 5.8 | 2026-03-04 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cau… |
CVE-2026-20014 | High | 7.7 | 2026-03-04 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with val… |
CVE-2026-20013 | Medium | 5.8 | 2026-03-04 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cau… |
CVE-2026-25988 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, sometimes msl.c fails… |
CVE-2026-25969 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashla… |
CVE-2026-25796 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in `ReadSTEGANOImage()… |