CWE-416 · Use After Free (page 38)
Page 38 of 89 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9420 | High | 8.8 | 2024-11-12 | A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated… |
CVE-2024-50261 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: macsec: Fix use-after-free while sending the offloading packet KASAN reports the followin… |
CVE-2024-50257 | High | 7.0 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in get_info() ip6table_nat module unload has refcnt warning… |
CVE-2024-50226 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown In support of investig… |
CVE-2024-50217 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() Mounting bt… |
CVE-2024-27530 | High | 8.4 | 2024-11-08 | wasm3 139076a contains a Use-After-Free in ForEachModule. |
CVE-2024-50186 | High | 7.8 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf->create fails We have recently noticed the… |
CVE-2024-50154 | Critical | 9.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). Martin KaFai Lau reported us… |
CVE-2024-50150 | High | 7.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to… |
CVE-2024-50149 | Medium | 5.5 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't free job in TDR Freeing job in TDR is not safe as TDR can pass the run_job… |
CVE-2024-10827 | High | 8.8 | 2024-11-06 | Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2024-10826 | High | 8.8 | 2024-11-06 | Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a… |
CVE-2024-50130 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: must hold reference on net namespace BUG: KASAN: slab-use-after-free in _… |
CVE-2024-50127 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in taprio_change() In 'taprio_change()', 'admin' pointer m… |
CVE-2024-50126 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: sched: use RCU read-side critical section in taprio_dump() Fix possible use-after-fr… |
CVE-2024-50125 | High | 8.0 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_sock_timeout conn->sk maybe have been unlinked/freed while… |
CVE-2024-50124 | High | 8.0 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix UAF on iso_sock_timeout conn->sk maybe have been unlinked/freed while… |
CVE-2024-50121 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net In the normal… |
CVE-2024-50114 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unregister redistributor for failed vCPU creation Alex reports that syzkaller… |
CVE-2024-50106 | Critical | 9.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix race between laundromat and free_stateid There is a race between laundromat han… |
CVE-2024-38424 | High | 7.8 | 2024-11-04 | Memory corruption during GNSS HAL process initialization. |
CVE-2024-38421 | High | 7.8 | 2024-11-04 | Memory corruption while processing GPU commands. |
CVE-2024-38419 | High | 7.8 | 2024-11-04 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
CVE-2024-38415 | High | 7.8 | 2024-11-04 | Memory corruption while handling session errors from firmware. |
CVE-2024-33068 | High | 7.5 | 2024-11-04 | Transient DOS while parsing fragments of MBSSID IE from beacon frame. |
CVE-2024-33033 | Medium | 6.7 | 2024-11-04 | Memory corruption while processing IOCTL calls to unmap the buffers. |
CVE-2024-33029 | Medium | 6.7 | 2024-11-04 | Memory corruption while handling the PDR in driver for getting the remote heap maps. |
CVE-2024-9826 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage thi… |
CVE-2024-8595 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage… |
CVE-2024-8590 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage th… |
CVE-2024-10488 | High | 8.8 | 2024-10-29 | Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-10459 | High | 7.5 | 2024-10-29 | An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox <… |
CVE-2024-50086 | Critical | 9.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off There is racy issue between smb2 session… |
CVE-2024-50085 | Critical | 9.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow Syzkaller reported this splat: … |
CVE-2024-50084 | Medium | 5.5 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() Commit a3c1e451… |
CVE-2024-50073 | High | 7.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux BUG: KASAN: slab-use-after-free in gsm_… |
CVE-2024-44285 | High | 7.8 | 2024-10-28 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS… |
CVE-2024-50067 | High | 7.8 | 2024-10-28 | In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetching args Uprobe needs to fetch args int… |
CVE-2024-47033 | High | 7.8 | 2024-10-25 | In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wit… |
CVE-2024-47017 | High | 7.8 | 2024-10-25 | In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privilege with no… |
CVE-2024-48423 | High | 7.8 | 2024-10-24 | An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library. |
CVE-2024-50061 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race… |
CVE-2024-50059 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to rac… |
CVE-2024-50047 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption (large read) crashes w… |
CVE-2024-50043 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREE_STATEID When multiple FREE_STATEIDs are sent for the s… |
CVE-2024-50030 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/ct: prevent UAF in send_recv() Ensure we serialize with completion side to prevent… |
CVE-2024-50029 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync This checks if the ACL connection… |
CVE-2024-50027 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Free tzp copy along with the thermal zone The object pointed to by tz->tzp… |
CVE-2022-49029 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning a… |
CVE-2022-49026 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can'… |
CVE-2022-49025 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free when reverting termination table When having multiple dests… |
CVE-2022-49017 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tipc: re-fetch skb cb after tipc_msg_validate As the call trace shows, the original skb w… |
CVE-2022-49015 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netif_rx() which may free… |
CVE-2022-49014 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tun_detach() syzbot reported use-after-free in tun_detach… |
CVE-2022-49006 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events hav… |
CVE-2022-49003 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix SRCU protection of nvme_ns_head list Walking the nvme_ns_head siblings list is… |
CVE-2022-48991 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths Any codepath that zaps p… |
CVE-2022-48990 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free during gpu recovery [Why] [ 754.862560] refcount_t: u… |
CVE-2022-48988 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: memcg: fix possible use-after-free in memcg_write_event_control() memcg_write_event_contr… |
CVE-2022-48981 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove errant put in error path drm_gem_shmem_mmap() doesn't own this r… |
CVE-2022-48964 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ravb: Fix potential use-after-free in ravb_rx_gbeth() The skb is delivered to napi_gro_re… |
CVE-2022-48962 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The skb is delivered to n… |
CVE-2022-48960 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() The skb is delivered to napi… |
CVE-2022-48956 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid use-after-free in ip6_fragment() Blamed commit claimed rcu_read_lock() was he… |
CVE-2022-48954 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix use-after-free in hsci KASAN found that addr was dereferenced after br2dev… |
CVE-2022-48950 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf_pending_task() UaF Per syzbot it is possible for perf_pending_task() to ru… |
CVE-2024-50005 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154_scan_worker In the `mac802154… |
CVE-2024-49992 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/stm: Avoid use-after-free issues with crtc and plane ltdc_load() calls functions drm_… |
CVE-2024-49991 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer Pass pointer reference to amdgp… |
CVE-2024-49988 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbd_conn struct When sending an oplock break request, opinfo->conn… |
CVE-2024-49986 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors… |
CVE-2024-49982 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f9… |
CVE-2024-49981 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venus_remove due to race condition in venus_probe… |
CVE-2024-49966 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2_global_read_info() will initialize… |
CVE-2024-49960 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4_fil… |
CVE-2024-49950 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix uaf in l2cap_connect [Syzbot reported] BUG: KASAN: slab-use-after-f… |
CVE-2024-49945 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function… |
CVE-2024-49936 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu it… |
CVE-2024-49925 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and… |
CVE-2024-49924 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: fbdev: pxafb: Fix possible use after free in pxafb_task() In the pxafb_probe function, it… |
CVE-2024-49903 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] ============================================… |
CVE-2024-49889 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path may be fre… |
CVE-2024-49884 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-fr… |
CVE-2024-49883 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() As Ojaswin mentioned in Link, in e… |
CVE-2024-49876 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix UAF around queue destruction We currently do stuff like queuing the final des… |
CVE-2024-49874 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Co… |
CVE-2024-49867 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmoun… |
CVE-2024-49865 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xa_alloc to prevent UAF Evil user can guess the next id of the vm before… |
CVE-2024-6519 | High | 8.2 | 2024-10-21 | A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. |
CVE-2024-49855 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd… |
CVE-2024-49854 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for accessing waker_bfqq after splitting After commit 42c306ed7233 ("… |
CVE-2024-49852 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() The kref_put() f… |
CVE-2024-47750 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 Currently rsv_qp is freed before ib_unreg… |
CVE-2024-47748 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: assign irq bypass producer token correctly We used to call irq_bypass_unregis… |
CVE-2024-47747 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition In the… |
CVE-2024-47732 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix potential use after free bug The free_device_compression_mode(iaa_devic… |
CVE-2024-47730 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - inject error before stopping queue The master ooo cannot be comple… |
CVE-2024-47718 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtw_wait_firmware_complet… |
CVE-2024-47711 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't return OOB skb in manage_oob(). syzbot reported use-after-free in unix_str… |
CVE-2024-47706 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, three tasks… |