CWE-772
CVEs classified under CWE-772, newest first.
97 CVEsRSS
CVE-2026-80930Medium· 5.5kernel: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (CVE-2026-80930)
A flaw was found in the Linux kernel's TPM I2C Nuvoton driver. The `i2c_nuvoton_wait_for_stat()` function enables an interrupt (IRQ) but fails to disable it if the wait operation times out or is interrupted. This oversight can lead to an u…
CVE-2026-89437Medium· 5.5kernel: platform/x86: int1092: Fix potential memory leak in sar_probe() (CVE-2026-89437)
A flaw was found in the Linux kernel. The `sar_probe()` function, specifically in its error handling paths, fails to free memory allocated for `device_mode_info` by the `parse_package()` function, which is called by `sar_get_data()`. This …
CVE-2026-80990Medium· 5.5kernel: net: thunderbolt: Release the Rx HopID that was handed out on mismatch (CVE-2026-80990)
A flaw was found in the Linux kernel's Thunderbolt networking driver. An issue in the `tbnet_connected_work()` function can lead to a resource leak. When an unexpected HopID is allocated during an XDomain connection, the ID is not properly…
CVE-2026-80988Medium· 5.5kernel: NTB: ntb_transport: Fail TX enqueue when the QP link is down (CVE-2026-80988)
A flaw was found in the Linux kernel's Non-Transparent Bridge (NTB) transport module. When the NTB transport attempts to transmit packets while the Queue Pair (QP) link is down, the system incorrectly reports a successful transmission with…
CVE-2026-80987Medium· 5.5⚖ disputedkernel: NTB: ntb_transport: Reject oversized TX buffers (CVE-2026-80987)
A flaw was found in the Linux kernel's Non-Transparent Bridge (NTB) transport module. When processing oversized transmit (TX) buffers, the system fails to properly free the allocated memory, leading to a memory leak. This continuous leakag…
CVE-2026-89473Medium· 5.5kernel: power: supply: bq25890: Fix power_supply reference leak (CVE-2026-89473)
A flaw was found in the Linux kernel's bq25890 power supply driver. The bq25890_fw_probe() function acquires a reference to a secondary charger but fails to release it on subsequent probe failures or driver detach. This reference leak can …
CVE-2026-89512Medium· 5.5kernel: remoteproc: scp: Fix device reference leak on failed lookup (CVE-2026-89512)
A flaw was found in the Linux kernel's remoteproc SCP component. This vulnerability involves a device reference leak, where the system fails to properly release a reference to a device during a driver data lookup. This occurs specifically …
CVE-2026-89496Medium· 5.5kernel: ocfs2: always run deallocs on copy-on-write completion (CVE-2026-89496)
A flaw was found in ocfs2, the Oracle Cluster File System, within the Linux kernel. A local user could exploit this vulnerability by performing a `copy_file_range()` operation within the same filesystem. This can lead to a memory leak, pot…
CVE-2026-89605Medium· 5.5⚖ disputedkernel: ecryptfs: release message context on send failure (CVE-2026-89605)
A flaw was found in the `ecryptfs` component of the Linux kernel. When the `ecryptfs_send_miscdev()` function fails to send a message to the userspace daemon, the associated message context is not properly released. This oversight leaves t…
CVE-2026-89597Medium· 5.5⚖ disputedkernel: fbdev: uvesafb: unregister connector callback on init failure (CVE-2026-89597)
A flaw was found in the `uvesafb` component of the Linux kernel. During the initialization process, if the platform driver fails to register, a connector callback is not properly unregistered. This oversight can lead to a resource leak, wh…
CVE-2026-89565Medium· 5.5kernel: ipip: fix skb leak in collect_md mode when metadata_dst allocation fails (CVE-2026-89565)
A flaw was found in the Linux kernel's IP over IP (ipip) tunnel driver. When operating in collect_md mode, the ipip_tunnel_rcv() function fails to free a network packet buffer (skb) if the metadata_dst allocation fails. This oversight lead…
CVE-2026-89627Medium· 5.5kernel: HID: roccat: free buffered reports when destroying device (CVE-2026-89627)
A flaw was found in the Linux kernel's HID (Human Interface Device) roccat driver. When a roccat device is destroyed, the driver fails to properly free buffered reports, leading to a memory leak. A local attacker could potentially exploit …
CVE-2026-89626High· 7.0kernel: HID: sensor: custom: Fix field sysfs group cleanup on failure (CVE-2026-89626)
A flaw was found in the Linux kernel's Human Interface Device (HID) sensor custom driver. When creating sysfs groups for custom sensor fields, the `hid_sensor_custom_add_attributes()` function fails to properly clean up previously created …
CVE-2026-89710High· 7.0kernel: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (CVE-2026-89710)
A flaw was found in the Linux kernel's NFSv4.1 implementation. When a server returns a new layout state identifier while an existing one is still active, the pnfs_layout_process() function fails to properly release memory associated with l…
CVE-2026-89572Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() adds OPP tables from firmware, but some failure paths do not remove them
In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() adds OPP tables from firmware, but some failure paths do not remove them. The driver also uses dev_p…
CVE-2026-89539Medium· 5.9kernel: Linux kernel: SUNRPC memory leak due to duplicate CREDS_VALUE options (CVE-2026-89539)
A flaw was found in the SUNRPC subsystem of the Linux kernel. The `gssx_dec_option_array()` function, responsible for decoding options, does not correctly handle replies containing duplicate `CREDS_VALUE` entries. This oversight causes the…
CVE-2026-89531High· 7.0kernel: svcrdma: Reject connection when transport allocation fails (CVE-2026-89531)
A flaw was found in the Linux kernel's svcrdma module. A remote attacker can exploit this vulnerability by repeatedly attempting connections when the system is under memory pressure. This can lead to a resource leak of `rdma_cm_id` objects…
CVE-2026-89529High· 7.0kernel: svcrdma: Reject oversized Read segments at decode time (CVE-2026-89529)
A flaw was found in the Linux kernel's svcrdma component, which handles Remote Procedure Call over Remote Direct Memory Access (RPC/RDMA) Read operations. This vulnerability occurs because the Read list decoder does not properly validate t…
CVE-2026-89527Medium· 5.5kernel: svcrdma: Use svc_xprt_put to free listener on create failure (CVE-2026-89527)
A flaw was found in the Linux kernel's svcrdma module. This vulnerability occurs when a listener creation fails, leading to an improper release of a network namespace reference. This resource leak can be exploited by a local attacker, pote…
CVE-2026-89714Medium· 5.5kernel: NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails (CVE-2026-89714)
A flaw was found in the Linux kernel's Network File System (NFS) component. When an NFSv4 mount attempt fails, the nfs4_server_common_setup() function does not properly free a memory allocation for the delegation hash table. A client that …
CVE-2026-89644Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs_dio_iomap_begin() calls btrfs_get_extent(), which returns an extent map reference that must be dropped on al…
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs_dio_iomap_begin() calls btrfs_get_extent(), which returns an extent map reference that must be dropped on al…
CVE-2026-80942Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() The memory allocated inside rtl92du_init_shared_data() is not freed in any of the subseque…
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() The memory allocated inside rtl92du_init_shared_data() is not freed in any of the subseque…
CVE-2026-89454Medium· 4.4In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_interrupts() initializes IRQ domains and creates IRQ mapping but does not unwind…
In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_interrupts() initializes IRQ domains and creates IRQ mapping but does not unwind…
CVE-2026-80940Medium· 5.5kernel: wifi: rtw88: pci: fix resource leak on failed NAPI setup (CVE-2026-80940)
A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI (Networked Attached Peripheral Interface) setup fails, allocated PCI resources are not properly released. This resource leak could potentially l…
CVE-2026-89449Medium· 5.5kernel: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add (CVE-2026-89449)
A flaw was found in the Linux kernel's Input-Output Memory Management Unit (IOMMU) subsystem. When a device addition fails during the `iommu_mock_device_add()` operation, the allocated device IOMMU structure is not properly deallocated. Th…
CVE-2026-89446Medium· 5.5kernel: iommufd: Release current IOAS on xa_store() failure (CVE-2026-89446)
A flaw was found in the Linux kernel's iommufd component. When the system attempts to store an Input/Output Address Space (IOAS) object and the storage operation fails, the IOAS object's associated resources, such as its write lock and obj…
CVE-2026-81018Medium· 5.5kernel: platform/x86: think-lmi: Free system certificate signatures (CVE-2026-81018)
A flaw was found in the Linux kernel's `think-lmi` driver. When the driver is removed, the system authentication object fails to free stored certificate signatures, leading to a memory leak. This can result in system instability or denial …
CVE-2026-80974Medium· 5.5kernel: mfd: sm501: Fix potential memory leaks during remove (CVE-2026-80974)
A flaw was found in the `mfd: sm501` component of the Linux kernel. This vulnerability arises from a failure to properly free allocated memory for `struct sm501_devdata` during the device removal process. A local attacker could potentially…
CVE-2026-87776High· 7.5compression is a Node.js and Express compression middleware
compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destro…
CVE-2026-72931Medium· 4.7Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.