cve.bz

CWE-826: Premature Release of Resource During Expected Lifetime

Filter

The product releases a resource that is still intended to be used by itself or another actor.

What the weakness is: CWE-826 at MITRE. All weaknesses

Ask an AI about CWE-826

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-826: Premature Release of Resource During Expected Lifetime and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/826.html and https://cve.bz/cve/cwe/826?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-49427EPSS 0.5%

    Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an object with the SF_NOCACHE flag, it freed the underlying pages after transmission even though existing mappings still refer…

  2. 8.8CVE-2026-53322EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_cleanup() before the function is disable…

  3. 7.8CVE-2026-45984EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in iomap inline data write path The inline data buffer head (dibh) is being released prematurely in gfs2_iomap_begin() via release_metapath() wh…

  4. 7.8CVE-2026-31663EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_HOOK After async crypto completes, xfrm_input_resume() calls dev_put() immediately on re-entry before the skb reaches …

  5. 9.2CVE-2026-33526EPSS 9.1%

    Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial o…

  6. 8.7CVE-2026-32748EPSS 9.1%

    Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows…

  7. 3.7CVE-2024-58249EPSS 0.5%

    In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.

  8. 8.7CVE-2025-31115EPSS 0.7%

    XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects includ…

  9. 3.7CVE-2025-24912EPSS 0.8%

    hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and forc…

  10. 7.1CVE-2024-51727EPSS 0.5%

    Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate user's session and cause a denial-of-service attack on a user's account.

  11. 7.5CVE-2023-1297EPSS 0.8%

    Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resol…