CWE-415: Double Free, page 7
Filter
The product calls free() twice on the same memory address.
What the weakness is: CWE-415 at MITRE
Ask an AI about CWE-415
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-415: Double Free and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/415.html and https://cve.bz/cve/cwe/415?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2025-38490EPSS 0.4%
In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_page() page_pool_put_full_page() should only be invoked when freeing Rx buffers or building a skb if the size is too shor…
- 7.8CVE-2025-38423EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9375: Fix double free of regulator supplies Driver gets regulator supplies in probe path with devm_regulator_bulk_get(), so should not call regulator_bu…
- 7.8CVE-2025-38421EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed allocations If setting up smart PC fails for any reason then this can lead to a double free when unloading amd-pmf. This is be…
- 7.8CVE-2025-38411EPSS 0.4%
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it will have the ref that belongs to the IN_PROGRESS flag removed at that point - how…
- 5.9CVE-2025-8058EPSS 0.2%
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random mal…
- 7.8CVE-2025-38341EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that caller of fbnic_mbx_map_msg() retains the ownership of the message on error. All exis…
- 7.8CVE-2025-38338EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() Sometimes, when a file was read while it was being truncated by another NFS client, the kernel could deadl…
- 7.8CVE-2025-38313EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how the deallocations are done but, in the process, introduced a double-free on the mc_dev var…
- 8.2CVE-2025-32988EPSS 1.5%
A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed,…
- 7.8CVE-2025-49693EPSS 0.4%
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- 7.4CVE-2025-49690EPSS 0.3%
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthorized attacker to elevate privileges locally.
- 8.8CVE-2025-49688EPSS 1.0%
Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2025-49667EPSS 0.6%
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2025-47975EPSS 0.4%
Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-27051EPSS 0.1%
Memory corruption while processing command message in WLAN Host.
- 7.8CVE-2025-27046EPSS 0.1%
Memory corruption while processing multiple simultaneous escape calls.
- 7.8CVE-2025-21432EPSS 0.09%
Memory corruption while retrieving the CBOR data from TA.
- 7.8CVE-2025-38206EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return erro…
- 5.5CVE-2025-38186EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() Before the commit under the Fixes tag below, bnxt_ulp_stop() and bnxt_ulp_start() were always invoked …
- 6.5CVE-2025-5351EPSS 0.6%
A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared…
- 7.8CVE-2022-50164EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue After successfull station association, if station queues are disabled for some reason, the related l…
- 7.8CVE-2022-50115EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes We have sanity checks for byte controls and if any of the fail the locally allocated …
- 7.8CVE-2022-49990EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork() failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the thread_struct of t…
- 7.8CVE-2025-38079EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. …
- 7.8CVE-2025-38069EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Fix a kernel oops found while testing the stm32_pcie Endpoint driver with handling of PERST# deas…
- 6.5CVE-2025-23096EPSS 0.3%
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation.
- 6.5CVE-2025-23095EPSS 0.3%
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation.
- 8.8CVE-2025-23102EPSS 0.4%
An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads to privilege escalation.
- 7.5CVE-2025-5262EPSS 0.5%
A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Th…
- 8.0CVE-2025-5100EPSS 0.3%
A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code execution.
- 7.8CVE-2025-37991EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, a…
- 5.5CVE-2025-37933EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat messages from the device, the driver calls the device-specific ndo_stop function, which…
- 7.0CVE-2025-37915EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: net_sched: drr: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the …
- 7.8CVE-2025-37914EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the …
- 7.8CVE-2025-37913EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the …
- 6.5CVE-2025-4574EPSS 0.6%
In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.
- 5.3CVE-2025-31241EPSS 0.9%
A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remo…
- 6.5CVE-2025-31235EPSS 0.2%
A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to cause unexpected system termination.
- 7.8CVE-2025-37817EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_d…
- 7.8CVE-2022-49900EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix adapter not be removed in piix4_remove() In piix4_probe(), the piix4 adapter will be registered in: piix4_probe() piix4_add_adapters_sb800() / p…
- 7.8CVE-2022-49826EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix double ata_host_put() in ata_tport_add() In the error path in ata_tport_add(), when calling put_device(), ata_tport_release() is called, it wi…
- 7.8CVE-2022-49789EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong type of integer in 'zfcp_fsf_req_send()' to cache the FSF request ID when sendin…
- 7.8CVE-2022-49775EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: tcp: cdg: allow tcp_cdg_release() to be called multiple times Apparently, mptcp is able to call tcp_disconnect() on an already disconnected flow. This is generally fine,…
- 5.5CVE-2025-37779EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: lib/iov_iter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, I encountered a folio UAF issue. The page sanity check rep…
- 7.8CVE-2025-27730EPSS 0.6%
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2025-26640EPSS 0.5%
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
- 1.9CVE-2025-2925EPSS 0.3%
A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to …
- 5.9CVE-2025-2027EPSS 0.2%
A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in s…
- 7.8CVE-2023-52930EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit_17 double-free A userspace with multiple threads racing I915_GEM_SET_TILING to set the tiling to I915_TILING_NONE could trigger a double free…
- 7.8CVE-2022-43454EPSS 0.2%
A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges.