CWE-416 · Use After Free (page 28)
Page 28 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-49685 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix use-after-free on remove Ensure that the irq_work has completed… |
CVE-2022-49669 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race on unaccepted mptcp sockets When the listener socket owning the relevant… |
CVE-2022-49667 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free after 802.3ad slave unbind commit 0622cab0341c ("bonding… |
CVE-2022-49651 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: srcu: Tighten cleanup_srcu_struct() GP checks Currently, cleanup_srcu_struct() checks for… |
CVE-2022-49647 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading css_sets for migration Each cset (css_… |
CVE-2022-49626 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix use after free when disabling sriov Use after free is detected by kfence when di… |
CVE-2022-49622 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: avoid skb access on nf_stolen When verdict is NF_STOLEN, the skb mi… |
CVE-2022-49535 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfc_i… |
CVE-2022-49524 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885_initdev() When the driver fails to… |
CVE-2022-49505 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev->rfkill to prevent UAF Commit 3e3b5dfcd16a ("NFC: reorder the logic… |
CVE-2022-49501 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: usbnet: Run unregister_netdev() before unbind() again Commit 2c9d6c2b871d ("usbnet: run u… |
CVE-2022-49493 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix errorenous cleanup order There is a logic error when removing rt5645 de… |
CVE-2022-49489 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm run… |
CVE-2022-49479 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix tx status related use-after-free race on station removal There is a small race… |
CVE-2022-49474 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout Connecting the sa… |
CVE-2022-49470 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event We should not access skb… |
CVE-2022-49465 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: blk-throttle: Set BIO_THROTTLED when bio has been throttled 1.In current process, all bio… |
CVE-2022-49464 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix buffer copy overflow of ztailpacking feature I got some KASAN report as below… |
CVE-2022-49426 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64_mm_context_put() wit… |
CVE-2022-49419 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup Commit b3c9a924aab6… |
CVE-2022-49416 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free in chanctx code In ieee80211_vif_use_reserved_context(… |
CVE-2022-49413 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a diffe… |
CVE-2022-49412 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bfq: Avoid merging queues with different parents It can happen that the parent of a bfqq… |
CVE-2022-49411 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bfq: Make sure bfqg for which we are queueing requests is online Bios queued into BFQ IO… |
CVE-2022-49390 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for real_dev Create a new macsec device but not get reference to real… |
CVE-2022-49388 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_create_volume: Fix use-after-free when volume creation failed There is an use-af… |
CVE-2022-49385 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed When driver_attach(drv); failed, the driv… |
CVE-2022-49377 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx blk_mq_run_hw_queues() could be run wh… |
CVE-2022-49362 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noref() can free @nf… |
CVE-2022-49359 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Job should reference MMU not file_priv For a while now it's been allowed fo… |
CVE-2022-49349 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_rename_dir_prepare We got issue as follows: EXT4-fs (loo… |
CVE-2022-49328 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASA… |
CVE-2022-49291 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent hw_params and hw_free calls Currently we have neith… |
CVE-2022-49288 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent prealloc proc writes We have no protection against… |
CVE-2022-49287 | High | 7.0 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tpm: fix reference counting for struct tpm_chip The following sequence of operations resu… |
CVE-2022-49275 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone s… |
CVE-2022-49270 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: dm: fix use-after-free in dm_cleanup_zoned_dev() dm_cleanup_zoned_dev() uses queue, so it… |
CVE-2022-49258 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccree - Fix use after free in cc_cipher_exit() kfree_sensitive(ctx_p->user.key) w… |
CVE-2022-49238 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855 Commit b4a0f541… |
CVE-2022-49236 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to race between btf_try_get_module and load_module While working on code… |
CVE-2022-49223 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cxl/port: Hold port reference until decoder release KASAN + DEBUG_KOBJECT_RELEASE reports… |
CVE-2022-49196 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix use after free in remove_phb_dynamic() In remove_phb_dynamic() we us… |
CVE-2022-49182 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: add vlan list lock to protect vlan list When adding port base VLAN, vf VLAN ne… |
CVE-2022-49179 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oom_bfqq Our test report a UAF: [ 2073.019181] ==================… |
CVE-2022-49176 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bfq: fix use-after-free in bfq_dispatch_request KASAN reports a use-after-free report whe… |
CVE-2022-49168 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clean up repair bio if submit fails The submit helper will always run bio_e… |
CVE-2022-49136 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set hci_cmd_sync_queue s… |
CVE-2022-49129 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix crash when startup fails. If the nic fails to start, it is possible tha… |
CVE-2022-49127 | High | 7.0 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ref_tracker: implement use-after-free detection Whenever ref_tracker_dir_init() is called… |
CVE-2022-49114 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease… |
CVE-2022-49111 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hci_send_acl This fixes the following trace caused by re… |
CVE-2022-49093 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for page_pool fragment recycling Fix a use-after-free when using p… |
CVE-2022-49087 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix a race in rxrpc_exit_net() Current code can lead to the following race: CPU0… |
CVE-2022-49085 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in get_initial_state In get_initial_state, it calls no… |
CVE-2022-49082 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() The function mpt3sas_t… |
CVE-2022-49078 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4_decompress_safe_partial read out of bound When partialDecoding, it is EOF if… |
CVE-2022-49076 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix use-after-free bug for mm struct Under certain conditions, such as MPI_Abo… |
CVE-2022-49063 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ice: arfs: fix use-after-free when freeing @rx_cpu_rmap The CI testing bots triggered the… |
CVE-2022-49059 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add flush_workqueue to prevent uaf Our detector found a concurrent use-after-fr… |
CVE-2022-49053 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmu_try_get_data_page() looks up pages under c… |
CVE-2022-49047 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix UAF in ep93xx_clk_register_gate() arch/arm/mach-ep93xx/clock.c:154:2… |
CVE-2021-47656 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2_clear_xattr_subsystem When we mount a jffs2 image, ass… |
CVE-2021-47653 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: media: davinci: vpif: fix use-after-free on driver unbind The driver allocates and regist… |
CVE-2021-47646 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Revert "Revert "block, bfq: honor already-setup queue merges"" A crash [1] happened to be… |
CVE-2021-47639 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU Zap both valid and inva… |
CVE-2021-47634 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl Hulk Robot reported a… |
CVE-2024-27246 | Medium | 4.3 | 2025-02-25 | Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. |
CVE-2024-27239 | Medium | 4.3 | 2025-02-25 | Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. |
CVE-2025-26601 | High | 7.8 | 2025-02-25 | A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the tr… |
CVE-2025-26600 | High | 7.8 | 2025-02-25 | A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device i… |
CVE-2025-26594 | High | 7.8 | 2025-02-25 | A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, t… |
CVE-2023-52926 | High | 7.8 | 2025-02-24 | In the Linux kernel, the following vulnerability has been resolved: IORING_OP_READ did not correctly consume the provided buffer list when read i/o returned <… |
CVE-2025-1006 | High | 8.8 | 2025-02-19 | Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chr… |
CVE-2024-56171 | High | 7.8 | 2025-02-18 | libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit… |
CVE-2025-26623 | Critical | 9.8 | 2025-02-18 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in… |
CVE-2025-0622 | Medium | 6.4 | 2025-02-18 | A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw allows an at… |
CVE-2025-26603 | Medium | 4.2 | 2025-02-18 | Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, variables a… |
CVE-2025-21703 | High | 7.8 | 2025-02-18 | In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() qdisc_tree_reduce_backlog()… |
CVE-2025-0997 | High | 8.1 | 2025-02-15 | Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte… |
CVE-2025-0995 | High | 8.8 | 2025-02-15 | Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-21700 | High | 7.8 | 2025-02-13 | In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann w… |
CVE-2024-41168 | High | 7.4 | 2025-02-12 | Use after free in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentia… |
CVE-2024-57951 | High | 7.8 | 2025-02-12 | In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitio… |
CVE-2025-0899 | High | 8.8 | 2025-02-11 | PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2024-12548 | Low | 3.3 | 2025-02-11 | Tungsten Automation Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sens… |
CVE-2025-21406 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21397 | High | 7.8 | 2025-02-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2025-21394 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21392 | High | 7.8 | 2025-02-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2025-21387 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21386 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21379 | High | 7.1 | 2025-02-11 | DHCP Client Service Remote Code Execution Vulnerability |
CVE-2025-21367 | High | 7.8 | 2025-02-11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2025-21159 | High | 7.8 | 2025-02-11 | Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2025-21693 | High | 7.8 | 2025-02-10 | In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswap_compress(… |
CVE-2025-0304 | High | 8.8 | 2025-02-07 | in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use afte… |
CVE-2024-57959 | Medium | 6.1 | 2025-02-06 | Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2025-0445 | Medium | 5.4 | 2025-02-04 | Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-0444 | Medium | 6.3 | 2025-02-04 | Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2025-1012 | High | 7.5 | 2025-02-04 | A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7… |