CWE-771 Missing Reference to Active Allocated Resource
baseThe product does not properly maintain a reference to a resource that has been allocated, which prevents the resource from being reclaimed.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (19)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20244US | high8.6 | — | ||
A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote… | ||||
| CVE-2021-34720US | high8.6 | — | ||
A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticat… | ||||
| CVE-2026-96325US | high7.5 | — | ||
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2024-56343US | medium6.5 | — | ||
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request. | ||||
| CVE-2026-23347US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
can: usb: f81604: correctly anchor the urb in the read bulk callback
When submitting an urb, that is using the… | ||||
| CVE-2023-53306US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fsdax: force clear dirty mark if CoW
XFS allows CoW on non-shared extents to combat fragmentation[1]. The old… | ||||
| CVE-2026-3039US | — | — | ||
BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constr… | ||||
| CVE-2026-20004US | — | — | ||
A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.
This vulnera… | ||||
| CVE-2023-53858US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
If clk_get_rate() fail… | ||||
| CVE-2023-53852US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
nvme-core: fix memory leak in dhchap_secret_store
Free dhchap_secret in nvme_ctrl_dhchap_secret_store() before… | ||||
| CVE-2023-53844US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/ttm: Don't leak a resource on swapout move error
If moving the bo to system for swapout failed, we were le… | ||||
| CVE-2022-50667US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()
If the copy of the description string from userspace fa… | ||||
| CVE-2022-50664US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-frontends: fix leak of memory fw | ||||
| CVE-2022-50663US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: fix possible memory leak in stmmac_dvr_probe()
The bitmap_free() should be called to free priv->a… | ||||
| CVE-2022-50658US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: qcom: fix memory leak in error path
If for some reason the speedbin length is incorrect, then there i… | ||||
| CVE-2023-53808US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
Always free the zeroed page on return from 'mwifiex… | ||||
| CVE-2025-40183US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
Cilium has a BPF egress gateway feature which forces ou… | ||||
| CVE-2025-40171US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
It’s possible for more than one async command to be in flig… | ||||
| CVE-2025-21090US | — | — | ||
Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access. | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan