CWE-401 · Missing Release of Memory after Effective Lifetime (page 4)
Page 4 of 20 — CVEs classified under CWE-401, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-31518 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full… |
CVE-2026-31517 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly In iptfs_reassem_con… |
CVE-2026-31461 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drm_edid leak in amdgpu_dm [WHAT] When a sink is connected, aconnect… |
CVE-2026-31459 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm… |
CVE-2026-31441 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset idxd_wq_disable_cleanup() which is ca… |
CVE-2026-31440 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the devic… |
CVE-2026-31434 | Medium | 5.5 | 2026-04-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group space_info When create_space_info_sub_group… |
CVE-2026-31429 | Medium | 5.5 | 2026-04-20 | In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKB_SMALL_HEAD_CACHE_SIZE is… |
CVE-2026-40336 | Low | 2.4 | 2026-04-18 | libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in `ptp_unpack_Sony_DPD()` in `camlibs/ptp2/ptp-pack… |
CVE-2026-33782 | Medium | 6.5 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, u… |
CVE-2026-33780 | Medium | 6.5 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evo… |
CVE-2026-33775 | Medium | 6.5 | 2026-04-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS o… |
CVE-2026-34052 | Medium | 5.9 | 2026-04-03 | LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictiona… |
CVE-2026-31400 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix cache_request leak in cache_release When a reader's file descriptor is closed… |
CVE-2026-31390 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xe_vm_madvise_ioctl When check_bo_args_are_sane() validation f… |
CVE-2026-23464 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() In mpfs_sys_controll… |
CVE-2026-23453 | High | 7.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode Page recycling… |
CVE-2026-23444 | High | 7.8 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure ieee80211_tx_prepar… |
CVE-2026-23431 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_probe(), ctlr is al… |
CVE-2026-23430 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's d… |
CVE-2026-23423 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: btrfs: free pages on error in btrfs_uring_read_extent() In this function the 'pages' obje… |
CVE-2026-23418 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Fix leak on xa_store failure Free the newly allocated entry when xa_store(… |
CVE-2026-23414 | High | 7.5 | 2026-04-02 | In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait() The async_hold queue pins encrypted inp… |
CVE-2026-23403 | Medium | 5.5 | 2026-04-01 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call… |
CVE-2026-21714 | Medium | 5.3 | 2026-03-30 | A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to ex… |
CVE-2026-23399 | Medium | 5.5 | 2026-03-28 | In the Linux kernel, the following vulnerability has been resolved: nf_tables: nft_dynset: fix possible stateful expression memleak in error path If cloning… |
CVE-2026-3650 | High | 7.5 | 2026-03-26 | A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta informat… |
CVE-2026-4247 | High | 7.5 | 2026-03-26 | When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should… |
CVE-2026-20012 | High | 8.6 | 2026-03-25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Ap… |
CVE-2026-3104 | High | 7.5 | 2026-03-25 | A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 thro… |
CVE-2026-23389 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in ice_set_ringparam() In ice_set_ringparam, tx_rings and xdp_rings… |
CVE-2026-23384 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() struct ionic_cq_resp resp { __… |
CVE-2026-23360 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called… |
CVE-2026-23352 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efi_free_boot_services() frees memory occu… |
CVE-2026-23350 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/queue: Call fini on exec queue creation fail Every call to queue init should have… |
CVE-2026-23339 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive() takes ownership o… |
CVE-2026-23337 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf… |
CVE-2026-23335 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() struct irdma_create_ah_resp {… |
CVE-2026-23330 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete… |
CVE-2026-23297 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). syzbot reported memory leak of str… |
CVE-2026-33852 | High | 7.5 | 2026-03-24 | Missing Release of Memory after Effective Lifetime vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
CVE-2026-33856 | High | 7.5 | 2026-03-24 | Missing Release of Memory after Effective Lifetime vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. |
CVE-2026-32874 | High | 7.5 | 2026-03-20 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.4.0 through 5.11.0 contain an accumulating memory leak… |
CVE-2026-30873 | Medium | 4.9 | 2026-03-19 | OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to both 24.10.6 and 25.12.1, the jp_get_token function, which perform… |
CVE-2026-23263 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix page array leak d9f595b9a65e ("io_uring/zcrx: fix leaking pages on sg… |
CVE-2026-23261 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvme_fabrics creates an NVMe/FC controller in… |
CVE-2026-23260 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: regmap: maple: free entry on mas_store_gfp() failure regcache_maple_write() allocates a n… |
CVE-2026-23258 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setup_nic_devices(), the n… |
CVE-2025-71268 | High | 7.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent If we fail t… |
CVE-2026-0639 | Low | 3.3 | 2026-03-16 | in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory. |
CVE-2024-14027 | Medium | 5.5 | 2026-03-09 | In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexatt… |
CVE-2026-1605 | High | 7.5 | 2026-03-05 | In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: g… |
CVE-2026-20021 | Medium | 4.3 | 2026-03-04 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Softwar… |
CVE-2026-20106 | Medium | 5.3 | 2026-03-04 | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Se… |
CVE-2026-20105 | High | 7.7 | 2026-03-04 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defen… |
CVE-2026-20015 | Medium | 5.8 | 2026-03-04 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cau… |
CVE-2026-20014 | High | 7.7 | 2026-03-04 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with val… |
CVE-2026-20013 | Medium | 5.8 | 2026-03-04 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cau… |
CVE-2026-25988 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, sometimes msl.c fails… |
CVE-2026-25969 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashla… |
CVE-2026-25796 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in `ReadSTEGANOImage()… |
CVE-2026-25638 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, memory leak exists in… |
CVE-2026-25637 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image wri… |
CVE-2025-61146 | Medium | 4.0 | 2026-02-23 | saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc_stub.c. |
CVE-2026-23228 | Medium | 5.5 | 2026-02-18 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() f… |
CVE-2026-23205 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix memory leak in smb2_open_file() Reproducer: 1. server: directories are… |
CVE-2026-23190 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma ops |
CVE-2026-23172 | High | 8.4 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflow in RX path When receiving data in the… |
CVE-2026-23170 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: drm/imx/tve: fix probe device leak Make sure to drop the reference taken to the DDC devic… |
CVE-2026-23164 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: rocker: fix memory leak in rocker_world_port_post_fini() In rocker_world_port_pre_init()… |
CVE-2026-23160 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix memory leak in octep_device_setup() In octep_device_setup(), if octep_ctrl… |
CVE-2026-23151 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix memory leak in set_ssp_complete Fix memory leak in set_ssp_complete(… |
CVE-2026-23150 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). syzbot reported various memory leaks… |
CVE-2026-23147 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix the folio leak on S390 hardware acceleration [BUG] After commit aa60fe12… |
CVE-2026-23145 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branch for ext4_xattr_ino… |
CVE-2026-23137 | Medium | 5.5 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: Fix memory leak in unittest_data_add() In unittest_data_add(), if of_resolv… |
CVE-2026-21438 | Medium | 5.3 | 2026-02-12 | webtransport-go is an implementation of the WebTransport protocol. Prior to 0.10.0, an attacker can cause unbounded memory consumption repeatedly creating and… |
CVE-2025-15572 | Low | 3.3 | 2026-02-10 | A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must b… |
CVE-2026-23108 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Fix similar memory leak… |
CVE-2026-23095 | High | 7.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. [0] Th… |
CVE-2026-23091 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: intel_th: fix device leak on output open() Make sure to drop the reference taken when loo… |
CVE-2026-23087 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Memory allocated for… |
CVE-2026-23080 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak… |
CVE-2026-23079 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() On error handling p… |
CVE-2026-23075 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak a… |
CVE-2026-23072 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: l2tp: Fix memleak in l2tp_udp_encap_recv(). syzbot reported memleak of struct l2tp_sessio… |
CVE-2026-23065 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrf_record() The tmp buffer is allocated using kcal… |
CVE-2026-23061 | Medium | 5.5 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Fix similar memory… |
CVE-2025-47397 | High | 7.8 | 2026-02-02 | Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors. |
CVE-2026-1757 | Medium | 6.2 | 2026-02-02 | A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly relea… |
CVE-2026-23026 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Fix a memory leak in gpi… |
CVE-2026-23024 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak of flow steer list on rmmod The flow steering list maintains entrie… |
CVE-2026-23023 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vport_rel() Free vport->rx_ptype_lkup in idpf_vport_rel() t… |
CVE-2026-23022 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vc_core_deinit() Make sure to free hw->lan_regs. Reported b… |
CVE-2026-23021 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: fix memory leak in update_eth_regs_async() When asynchronously writing… |
CVE-2025-71189 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure to drop the… |
CVE-2025-71188 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: lpc18xx-dmamux: fix device leak on route allocation Make sure to drop the refe… |
CVE-2025-71187 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: fix device leak on probe failure Make sure to drop the reference… |
CVE-2025-71186 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix device leak on route allocation Make sure to drop the refer… |
CVE-2025-71185 | Medium | 5.5 | 2026-01-31 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Make sure to drop… |