CWE-415 · Double Free (page 4)
Page 4 of 9 — CVEs classified under CWE-415, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-49290 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 ("mac80211: me… |
CVE-2022-49205 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix double uncharge the mem of sk_msg If tcp_bpf_sendmsg is running during… |
CVE-2022-49203 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix double free during GPU reset on DC streams [Why] The issue only occu… |
CVE-2021-47638 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ubifs: rename_whiteout: Fix double free for whiteout_ui->data 'whiteout_ui->data' will be… |
CVE-2025-21201 | High | 8.8 | 2025-02-11 | Windows Telephony Server Remote Code Execution Vulnerability |
CVE-2025-21183 | High | 7.4 | 2025-02-11 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2025-21182 | High | 7.4 | 2025-02-11 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2024-39564 | High | 7.5 | 2025-02-05 | This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability in the routing process daemon (rpd) of J… |
CVE-2025-21673 | Critical | 9.8 | 2025-01-31 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server i… |
CVE-2025-21291 | High | 8.8 | 2025-01-14 | Windows Direct Show Remote Code Execution Vulnerability |
CVE-2024-56775 | High | 7.8 | 2025-01-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount [Why] The mechanism to backup and restore… |
CVE-2024-56766 | High | 7.8 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create_user() The "user" pointer was convert… |
CVE-2024-35365 | High | 8.8 | 2025-01-03 | FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function. |
CVE-2024-56708 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unload The segmentation fault happens beca… |
CVE-2024-56704 | High | 8.4 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct de… |
CVE-2024-56699 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f ("s390/pci… |
CVE-2024-53213 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xx_prob… |
CVE-2024-53191 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If there is an error during some initialization… |
CVE-2024-49095 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-53133 | High | 7.8 | 2024-12-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle dml allocation failure to avoid crash [Why] In the case where a d… |
CVE-2024-12107 | High | 7.5 | 2024-12-04 | Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS |
CVE-2024-35368 | Critical | 9.8 | 2024-11-29 | FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. |
CVE-2024-11704 | Critical | 9.8 | 2024-11-26 | A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key c… |
CVE-2024-50276 | Critical | 9.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wi… |
CVE-2024-10934 | Critical | 9.8 | 2024-11-15 | In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninit… |
CVE-2024-47426 | High | 7.8 | 2024-11-12 | Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of t… |
CVE-2024-49014 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-43640 | High | 7.8 | 2024-11-12 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-43447 | High | 8.1 | 2024-11-12 | Windows SMBv3 Server Remote Code Execution Vulnerability |
CVE-2024-50235 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear wdev->cqm_config pointer on free When we free wdev->cqm_config when… |
CVE-2024-50215 | High | 8.1 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dh_key to NULL after kfree_sensitive ctrl->dh_key might be used across… |
CVE-2024-50159 | High | 7.0 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() Clang static check… |
CVE-2024-50152 | Critical | 9.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix possible double free in smb2_set_ea() Clang static checker(scan-build) w… |
CVE-2024-47404 | High | 8.4 | 2024-11-05 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double f… |
CVE-2024-3935 | Medium | 6.5 | 2024-10-30 | In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connectio… |
CVE-2024-50071 | High | 7.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func() 'new_map' is al… |
CVE-2024-44098 | High | 7.4 | 2024-10-25 | In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of… |
CVE-2024-50055 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() For bus_register(), any er… |
CVE-2024-49989 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue during amdgpu module unload Flexible endpoints use… |
CVE-2024-49983 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free When calling ext4_… |
CVE-2024-49882 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), s… |
CVE-2024-49853 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in OPTEE transport Channels can be shared between pro… |
CVE-2024-3187 | Medium | 5.9 | 2024-10-17 | This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0. These are caused by JST values not… |
CVE-2024-45402 | High | 8.6 | 2024-10-11 | Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsing a spoofed TLS handshake message, pic… |
CVE-2024-43514 | High | 7.8 | 2024-10-08 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2024-23379 | Medium | 6.7 | 2024-10-07 | Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario. |
CVE-2024-20498 | High | 8.6 | 2024-10-02 | Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthentica… |
CVE-2024-46741 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrp… |
CVE-2024-46736 | Critical | 9.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_rename_path() If smb2_set_path_attr() is ca… |
CVE-2024-46687 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() [BUG] There i… |
CVE-2024-46673 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aac_probe_one() calls hardware-specific i… |
CVE-2024-38247 | High | 7.8 | 2024-09-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-7256 | Medium | 4.4 | 2024-08-31 | In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo… |
CVE-2022-48919 | High | 8.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails… |
CVE-2022-48892 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dup_user_cpus_ptr() Since commit 07ec77a1d4e8 ("sch… |
CVE-2024-38157 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |
CVE-2024-42234 | High | 7.8 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been se… |
CVE-2024-41965 | Medium | 4.2 | 2024-08-01 | Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do w… |
CVE-2024-41957 | Medium | 4.5 | 2024-08-01 | Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will… |
CVE-2024-42147 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/debugfs - Fix debugfs uninit process issue During the zip probe process… |
CVE-2024-42138 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file In case… |
CVE-2024-42123 | High | 7.0 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_time… |
CVE-2023-52888 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driv… |
CVE-2024-41087 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ata_port_alloc() call in ata_host_… |
CVE-2024-41073 | Critical | 9.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and tha… |
CVE-2024-41046 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently release… |
CVE-2024-40940 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow… |
CVE-2024-38087 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-30013 | High | 8.8 | 2024-07-09 | Windows MultiPoint Services Remote Code Execution Vulnerability |
CVE-2024-21461 | High | 8.4 | 2024-07-01 | Memory corruption while performing finish HMAC operation when context is freed by keymaster. |
CVE-2024-23141 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free. This vulnerability, along with other vulnera… |
CVE-2024-39292 | High | 7.8 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is r… |
CVE-2024-38627 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: stm class: Fix a double free in stm_register_device() The put_device(&stm->dev) call will… |
CVE-2022-48740 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of cond_list on error paths On error path from cond_read_list()… |
CVE-2021-47589 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in `igbvf_probe` In `igbvf_probe`, if register_netdev() fails, the… |
CVE-2024-36973 | High | 8.4 | 2024-06-17 | In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() Wh… |
CVE-2024-30097 | High | 8.8 | 2024-06-11 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
CVE-2024-36940 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocate… |
CVE-2024-36030 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix the double free in rvu_npc_freemem() Clang static checker(scan-build) w… |
CVE-2021-47564 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix double free issue on err path fix error path handling in pres… |
CVE-2021-47483 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: regmap: Fix possible double-free in regcache_rbtree_exit() In regcache_rbtree_insert_to_b… |
CVE-2024-27127 | High | 7.2 | 2024-05-21 | A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users… |
CVE-2023-52851 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF In the unl… |
CVE-2023-52795 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix use after free in vhost_vdpa_probe() The put_device() calls vhost_vdpa_re… |
CVE-2023-52739 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: Fix page corruption caused by racy check in __free_pages When we upgraded our kernel, we… |
CVE-2021-47304 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized This commit fixes a bug (fo… |
CVE-2024-35856 | High | 8.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hci_devcd_append() would f… |
CVE-2024-35847 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_d… |
CVE-2023-52691 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in si_dpm_init When the allocation of adev->pm.dpm.dyn_stat… |
CVE-2023-52688 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws e… |
CVE-2023-52679 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: of: Fix double free in of_parse_phandle_with_args_map In of_parse_phandle_with_args_map()… |
CVE-2024-35835 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails… |
CVE-2024-35814 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103… |
CVE-2023-52667 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g s… |
CVE-2023-52664 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in r… |
CVE-2024-27433 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()… |
CVE-2024-30027 | High | 7.8 | 2024-05-14 | NTFS Elevation of Privilege Vulnerability |
CVE-2023-44247 | Medium | 6.6 | 2024-05-14 | A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafte… |
CVE-2023-52384 | Medium | 4.7 | 2024-05-14 | Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52383 | Medium | 4.7 | 2024-05-14 | Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. |