CWE-415 · Double Free (page 3)
Page 3 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-61990 | High | 7.5 | 2025-10-15 | When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Softwa… |
CVE-2025-59289 | High | 7.0 | 2025-10-14 | Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-23282 | High | 7.0 | 2025-10-10 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit o… |
CVE-2023-53626 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible double unlock when moving a directory |
CVE-2022-50543 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix mr->map double free rxe_mr_cleanup() which tries to free mr->map again will… |
CVE-2022-50536 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data In tcp_bpf_send_ver… |
CVE-2023-53616 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount syzbot found an invalid-free… |
CVE-2023-53596 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code, devre… |
CVE-2023-53586 | High | 8.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix multiple LUN_RESET handling This fixes a bug where an initiator thinks… |
CVE-2022-50499 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: Fix double free in dvb_register_device() In function dvb_register_device… |
CVE-2022-50470 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: xhci: Remove device endpoints from bandwidth list when freeing the device Endpoints are n… |
CVE-2023-53510 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp->cmd ufshcd_queuecommand() may be called two times… |
CVE-2025-39914 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: Silence warning when chunk allocation fails in trace_pid_write Syzkaller trigger… |
CVE-2025-47316 | High | 7.8 | 2025-09-24 | Memory corruption due to double free when multiple threads race to set the timestamp store. |
CVE-2025-39870 | High | 7.8 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_wqs() The clean up in idxd_setup_wqs() has… |
CVE-2025-51006 | High | 7.8 | 2025-09-22 | Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c. Th… |
CVE-2022-50419 | High | 8.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times device_add shall n… |
CVE-2022-50401 | Critical | 9.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure On error situation `cl… |
CVE-2023-53360 | Critical | 9.8 | 2025-09-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: Rework scratch handling for READ_PLUS (again) I found that the read code might s… |
CVE-2023-53308 | High | 7.8 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pm_runtime_get() failing in .remove() In the (unlikely) event tha… |
CVE-2025-55118 | High | 8.9 | 2025-09-16 | Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: *… |
CVE-2022-50303 | High | 7.8 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix double release compute pasid If kfd_process_device_init_vm returns failur… |
CVE-2023-53148 | High | 7.8 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: igb: Fix igb_down hung on surprise removal In a setup where a Thunderbolt hub connects to… |
CVE-2022-50248 | High | 7.8 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double free on tx path. We see kernel crashes and lockups and KAS… |
CVE-2025-39790 | High | 8.4 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a co… |
CVE-2025-38731 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vm_bind_ioctl double free bug If the argument check during an array bind fail… |
CVE-2025-38699 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfad_im_probe() function fails during initialization… |
CVE-2025-38682 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: i2c: core: Fix double-free of fwnode in i2c_unregister_device() Before commit df6d7277e55… |
CVE-2025-38593 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' Function 'hci_disc… |
CVE-2025-38582 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsv_qp rsv_qp may be double destroyed in error flow… |
CVE-2025-53948 | High | 7.5 | 2025-08-18 | The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The applicatio… |
CVE-2025-20134 | High | 8.6 | 2025-08-14 | A vulnerability in the certificate processing of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD… |
CVE-2023-45584 | Medium | 6.6 | 2025-08-12 | A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versi… |
CVE-2025-50169 | High | 7.5 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an unauthorized attacker to execute code over… |
CVE-2025-55158 | High | 8.8 | 2025-08-11 | Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operatio… |
CVE-2025-23322 | High | 7.5 | 2025-08-06 | NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a stream is cancelled befo… |
CVE-2025-8585 | Medium | 5.3 | 2025-08-05 | A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the function main of the file /avtools/avconv… |
CVE-2025-38490 | Critical | 9.8 | 2025-07-28 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_page() page_pool_put_full_page() should o… |
CVE-2025-38423 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9375: Fix double free of regulator supplies Driver gets regulator suppli… |
CVE-2025-38421 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed allocations If setting up smart PC fails for an… |
CVE-2025-38411 | Critical | 9.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it wi… |
CVE-2025-8058 | | 2025-07-23 | The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished eith… | |
CVE-2025-38341 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that calle… |
CVE-2025-38338 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() Sometimes, when a file was… |
CVE-2025-38313 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how the deallo… |
CVE-2025-32988 | Medium | 6.5 | 2025-07-10 | A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (S… |
CVE-2025-49693 | High | 7.8 | 2025-07-08 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-49690 | High | 7.4 | 2025-07-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthor… |
CVE-2025-49688 | High | 8.8 | 2025-07-08 | Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. |
CVE-2025-49667 | High | 7.8 | 2025-07-08 | Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2025-47975 | High | 7.0 | 2025-07-08 | Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
CVE-2025-27051 | High | 7.8 | 2025-07-08 | Memory corruption while processing command message in WLAN Host. |
CVE-2025-27046 | High | 7.8 | 2025-07-08 | Memory corruption while processing multiple simultaneous escape calls. |
CVE-2025-21432 | High | 7.8 | 2025-07-08 | Memory corruption while retrieving the CBOR data from TA. |
CVE-2025-38206 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path… |
CVE-2025-38186 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() Before the commit unde… |
CVE-2025-5351 | Medium | 6.5 | 2025-07-04 | A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serial… |
CVE-2022-50164 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue After successfull st… |
CVE-2022-50115 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes We ha… |
CVE-2022-49990 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork() failure The pointers for guarded storage… |
CVE-2025-38079 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type… |
CVE-2025-38069 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Fix a kernel oops… |
CVE-2025-23096 | Medium | 6.5 | 2025-06-04 | An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation. |
CVE-2025-23095 | Medium | 6.5 | 2025-06-04 | An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation. |
CVE-2025-23102 | High | 8.8 | 2025-06-03 | An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads t… |
CVE-2025-5262 | High | 7.5 | 2025-05-27 | A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memo… |
CVE-2025-5100 | High | 8.0 | 2025-05-23 | A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code… |
CVE-2025-37991 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash… |
CVE-2025-37933 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat message… |
CVE-2025-37915 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: drr: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-37914 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-37913 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-4574 | Medium | 6.5 | 2025-05-13 | In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free tha… |
CVE-2025-31241 | Medium | 5.3 | 2025-05-12 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS So… |
CVE-2025-31235 | Medium | 6.5 | 2025-05-12 | A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura… |
CVE-2025-37817 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_devi… |
CVE-2022-49900 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix adapter not be removed in piix4_remove() In piix4_probe(), the piix4 adap… |
CVE-2022-49826 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix double ata_host_put() in ata_tport_add() In the error path in… |
CVE-2022-49789 | High | 7.0 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong… |
CVE-2022-49775 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tcp: cdg: allow tcp_cdg_release() to be called multiple times Apparently, mptcp is able t… |
CVE-2025-37779 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: lib/iov_iter: fix to increase non slab folio refcount When testing EROFS file-backed moun… |
CVE-2025-27730 | High | 7.8 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-26640 | High | 7.0 | 2025-04-08 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-2925 | Low | 3.3 | 2025-03-28 | A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c… |
CVE-2025-2027 | | 2025-03-28 | A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC… | |
CVE-2023-52930 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit_17 double-free A userspace with multiple threads racing I915_… |
CVE-2022-43454 | High | 7.8 | 2025-03-10 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2… |
CVE-2024-53698 | Medium | 4.9 | 2025-03-07 | A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers wh… |
CVE-2025-21825 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT During the update proced… |
CVE-2024-58055 | High | 7.8 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Don't free command immediately Don't prematurely free the command. Wa… |
CVE-2024-57980 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to… |
CVE-2022-49686 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix list double add in uvcg_video_pump A panic can occur if the endpoin… |
CVE-2022-49541 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential double free during failed mount RHBZ: https://bugzilla.redhat.com/sho… |
CVE-2022-49530 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in si_parse_power_table() In function si_parse_power_table()… |
CVE-2022-49519 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10k_halt during suspend for driver state RESTARTING Double free crash is… |
CVE-2022-49508 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elan_input_configured 'input' is a managed resour… |
CVE-2022-49455 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible double free in ocxl_file_register_afu info_release() will be cal… |
CVE-2022-49410 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in create_var_ref() In create_var_ref(), init_var_ref(… |
CVE-2022-49391 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: mtk_scp: Fix a potential double free 'scp->rproc' is allocated using devm_rpr… |
CVE-2022-49384 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: md: fix double free of io_acct_set bioset Now io_acct_set is alloc and free in personalit… |