CWE-416 · Use After Free (page 36)
Page 36 of 83 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5269 | High | 8.8 | 2024-06-06 | Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra… |
CVE-2024-30375 | High | 7.8 | 2024-06-06 | Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-34362 | Medium | 5.9 | 2024-06-04 | Envoy is a cloud-native, open source edge and service proxy. There is a use-after-free in `HttpConnectionManager` (HCM) with `EnvoyQuicServerStream` that can c… |
CVE-2024-32974 | Medium | 5.9 | 2024-06-04 | Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call st… |
CVE-2023-43544 | Medium | 6.7 | 2024-06-03 | Memory corruption when IPC callback handle is used after it has been released during register callback by another thread. |
CVE-2023-43543 | Medium | 6.7 | 2024-06-03 | Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object. |
CVE-2024-36844 | High | 7.5 | 2024-05-31 | libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS… |
CVE-2024-5498 | High | 8.8 | 2024-05-30 | Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-5496 | High | 8.8 | 2024-05-30 | Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM… |
CVE-2024-5495 | High | 8.8 | 2024-05-30 | Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-5494 | High | 8.8 | 2024-05-30 | Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-36932 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Prevent use-after-free from occurring after cdev removal Since thermal_d… |
CVE-2024-36904 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson Nascimento reported a use… |
CVE-2024-36899 | High | 7.0 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occ… |
CVE-2024-36886 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative… |
CVE-2024-34161 | Medium | 5.3 | 2024-05-29 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit (MTU) of 4096 or… |
CVE-2023-43842 | High | 7.3 | 2024-05-28 | Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter user… |
CVE-2021-47571 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() The free_rtllib() funct… |
CVE-2021-47565 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's s… |
CVE-2021-47561 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: disable timeout handling If a timeout is hit, it can result is incorrect dat… |
CVE-2021-47549 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl When the `rmmod sata_fsl.ko`… |
CVE-2021-47541 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() In mlx4_en_try_al… |
CVE-2021-47533 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: kms: Clear the HVS FIFO commit pointer once done Commit 9ec03d7f1ed3 ("drm/vc4… |
CVE-2021-47525 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix use-after-free and memleak on unbind Deregister the port when unbin… |
CVE-2021-47521 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in ems_pcmcia_add_card() If the last channel is not avai… |
CVE-2021-47520 | High | 8.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: can: pch_can: pch_can_rx_normal: fix use after free After calling netif_receive_skb(skb)… |
CVE-2021-47517 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short per… |
CVE-2021-47506 | Critical | 9.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix use-after-free due to delegation race A delegation break could arrive as soon a… |
CVE-2021-47505 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: aio: fix use-after-free due to missing POLLFREE handling signalfd_poll() and binder_poll(… |
CVE-2021-47500 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: iio: mma8452: Fix trigger reference couting The mma8452 driver directly assigns a trigger… |
CVE-2024-36013 | High | 8.8 | 2024-05-23 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to… |
CVE-2024-36012 | High | 7.8 | 2024-05-23 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do_close() Tying the msft->data lifetime… |
CVE-2024-5157 | High | 8.8 | 2024-05-22 | Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pa… |
CVE-2021-47479 | High | 7.0 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use-after-free in rtl8712_dl_fw Syzbot reported use-after-free in r… |
CVE-2021-47470 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential use-after-free in slab_debugfs_fops When sysfs_slab_add failed, w… |
CVE-2021-47459 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv It will trigger UAF f… |
CVE-2021-47456 | High | 8.4 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: can: peak_pci: peak_pci_remove(): fix UAF When remove the module peek_pci, referencing 'c… |
CVE-2023-52859 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncor… |
CVE-2023-52854 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: padata: Fix refcnt handling in padata_free_shell() In a high-load arm64 environment, the… |
CVE-2023-52852 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to avoid use-after-free on dic Call trace: __memcpy+0x128/0x250 f2f… |
CVE-2023-52851 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF In the unl… |
CVE-2023-52847 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There may be some a race… |
CVE-2023-52846 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() The prp_fill_rct() function can… |
CVE-2023-52840 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device()… |
CVE-2023-52838 | Medium | 6.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the b… |
CVE-2023-52837 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_open Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and blk_cleanup… |
CVE-2023-52803 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cl… |
CVE-2023-52800 | Medium | 4.4 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the… |
CVE-2023-52798 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU bu… |
CVE-2023-52795 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix use after free in vhost_vdpa_probe() The put_device() calls vhost_vdpa_re… |
CVE-2023-52777 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix gtk offload status event locking The ath11k active pdevs are protected… |
CVE-2023-52776 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dfs-radar and temperature event locking The ath12k active pdevs are pro… |
CVE-2023-52772 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: af_unix: fix use-after-free in unix_stream_read_actor() syzbot reported the following cra… |
CVE-2023-52769 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix htt mlo-offset event locking The ath12k active pdevs are protected by R… |
CVE-2023-52760 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in gfs2_qd_dealloc In gfs2_put_super(), whether withdrawn o… |
CVE-2023-52757 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to… |
CVE-2023-52752 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() Skip SMB sessions that… |
CVE-2023-52751 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in smb2_query_info_compound() The following UAF was trigg… |
CVE-2023-52741 | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata->read_into_pages() When the network status is unstable… |
CVE-2023-52707 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: sched/psi: Fix use-after-free in ep_remove_wait_queue() If a non-root cgroup gets removed… |
CVE-2021-47427 | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix iscsi_task use after free Commit d39df158518c ("scsi: iscsi: Have abort… |
CVE-2021-47402 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: sched: flower: protect fl_walk() with rcu Patch that refactored fl_walk() to use idr… |
CVE-2021-47394 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unlink table before deleting it syzbot reports following UAF: BUG… |
CVE-2021-47391 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests The FSM can run… |
CVE-2021-47388 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mac80211: fix use-after-free in CCMP/GCMP RX When PN checking is done in mac80211, for fr… |
CVE-2021-47379 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd KASAN reports a use-… |
CVE-2021-47378 | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid use after free We should always destr… |
CVE-2021-47375 | Medium | 6.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: blktrace: Fix uaf in blk_trace access after removing by sysfs There is an use-after-free… |
CVE-2021-47372 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use after free on rmmod plat_dev->dev->platform_data is released by platfo… |
CVE-2021-47361 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcb_alloc_bus() There are two bugs: 1) If ida_simple_get() fai… |
CVE-2021-47358 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open indefinitel… |
CVE-2021-47357 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: atm: iphase: fix possible use-after-free in ia_module_exit() This module's remove path ca… |
CVE-2021-47356 | High | 7.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible use-after-free in HFC_cleanup() This module's remove path calls del_t… |
CVE-2021-47355 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: atm: nicstar: Fix possible use-after-free in nicstar_cleanup() This module's remove path… |
CVE-2021-47342 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible UAF when remounting r/o a mmp-protected file system After commit 618f0… |
CVE-2021-47341 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio BUG: KASAN… |
CVE-2021-47338 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fbmem: Do not delete the mode that is still in use The execution of fb_delete_videomode()… |
CVE-2021-47335 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances As syzbot rep… |
CVE-2021-47334 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: misc/libmasm/module: Fix two use after free in ibmasm_init_one In ibmasm_init_one, it cal… |
CVE-2021-47328 | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix conn use after free during resets If we haven't done a unbind target cal… |
CVE-2021-47324 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in wdt_startup() This module's remove path calls de… |
CVE-2021-47323 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() This module's remove pa… |
CVE-2021-47321 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free by calling del_timer_sync() This driver's remove pa… |
CVE-2021-47318 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: arch_topology: Avoid use-after-free for scale_freq_data Currently topology_scale_freq_tic… |
CVE-2021-47311 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used… |
CVE-2021-47310 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be used aft… |
CVE-2021-47306 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fza_probe fp is netdev private data and it cannot be used after fre… |
CVE-2021-47303 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free Subprograms are call… |
CVE-2021-47302 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: igc: Fix use-after-free error during reset Cleans the next descriptor to watch (next_to_w… |
CVE-2021-47301 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch (next_to_w… |
CVE-2021-47299 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: xdp, net: Fix use-after-free in bpf_xdp_link_release The problem occurs between dev_get_b… |
CVE-2021-47281 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix race of snd_seq_timer_open() The timer instance per queue is exclusive, an… |
CVE-2021-47280 | High | 7.0 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free read in drm_getunique() There is a time-of-check-to-time-of-use e… |
CVE-2021-47278 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove() This driver's remo… |
CVE-2021-47259 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4_init_client() KASAN reports a use-after-free when attempt… |
CVE-2021-47254 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked under lru_… |
CVE-2021-47247 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of encap entry in neigh update handler Function mlx5e_rep_n… |
CVE-2021-47239 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xx_bind The commit 46a8b29c6306 ("net: usb… |
CVE-2021-47235 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: fix potential use-after-free in ec_bhf_remove static void ec_bhf_remove(st… |
CVE-2021-47232 | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while in use This patch fixes a Use-after-Fr… |