CWE-826 Premature Release of Resource During Expected Lifetime
baseThe product releases a resource that is still intended to be used by itself or another actor.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (25)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33526US | high7.5 | — | ||
Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a re… | ||||
| CVE-2026-32748US | high7.5 | — | ||
Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denia… | ||||
| CVE-2026-46308US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()
In scpsys_get_bus_protection_lega… | ||||
| CVE-2025-71082US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btusb: revert use of devm_kzalloc in btusb
This reverts commit 98921dbd00c4e ("Bluetooth: Use devm_… | ||||
| CVE-2023-53307US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
If getting an ID or setting up a work qu… | ||||
| CVE-2022-50137US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix a window for use-after-free
During a destroy CQ an interrupt may cause processing of a CQE aft… | ||||
| CVE-2024-51727US | high7.5 | — | ||
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate user's session and cause a denial-of-serv… | ||||
| CVE-2023-1297US | high7.5 | — | ||
Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, r… | ||||
| CVE-2026-46203US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
spi: cadence-quadspi: fix unclocked access on unbind
Make sure that the controller is runtime resumed before d… | ||||
| CVE-2026-64205US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
i2c: i801: fix hardware state machine corruption in error path
A severe livelock and subsequent Hung Task pani… | ||||
| CVE-2026-53353US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
hsr: Remove WARN_ONCE() in hsr_addr_is_self().
syzbot reported the warning [0] in hsr_addr_is_self(),
whose as… | ||||
| CVE-2022-50517US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: do not clobber swp_entry_t during THP split
The following has been observed when running stres… | ||||
| CVE-2022-50215US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
scsi: sg: Allow waiting for commands to complete on removed device
When a SCSI device is removed while in acti… | ||||
| CVE-2025-38064US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
virtio: break and reset virtio devices on device_shutdown()
Hongyu reported a hang on kexec in a VM. QEMU repo… | ||||
| CVE-2024-27411US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: keep DMA buffers required for suspend/resume
Nouveau deallocates a few buffers post GPU init whic… | ||||
| CVE-2025-37985US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
Clearing WDM_WWAN_IN_USE must be the last action… | ||||
| CVE-2026-49427US | — | — | ||
Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an object with the SF_NOCACHE flag, it freed the underlying pages a… | ||||
| CVE-2026-53322US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Clean up DMABUFs before disabling function
On device shutdown, make vfio_pci_core_close_device() cal… | ||||
| CVE-2026-46319US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_ct: Only release RCU read lock after ct_ft
When looking up a flow table in act_ct in tcf_ct_flo… | ||||
| CVE-2026-45984US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in iomap inline data write path
The inline data buffer head (dibh) is being released… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan