Common Weakness Enumeration
CWE-415
AllowedDouble Free
Abstraction: Variant · Status: Draft
The product calls free() twice on the same memory address.
1078 vulnerabilities reference this CWE, most recent first.
GHSA-3VVP-8645-4QMR
Vulnerability from github – Published: 2022-05-13 01:16 – Updated: 2022-05-13 01:16
VLAI
Details
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
Severity
9.8 (Critical)
{
"affected": [],
"aliases": [
"CVE-2018-18751"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-10-29T12:29:00Z",
"severity": "CRITICAL"
},
"details": "An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.",
"id": "GHSA-3vvp-8645-4qmr",
"modified": "2022-05-13T01:16:29Z",
"published": "2022-05-13T01:16:29Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18751"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:3643"
},
{
"type": "WEB",
"url": "https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/doublefree"
},
{
"type": "WEB",
"url": "https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/heapcorruption"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3815-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/3815-2"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00061.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00065.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00025.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-3WW2-QGP7-JHWW
Vulnerability from github – Published: 2026-09-08 18:33 – Updated: 2026-09-08 18:33
VLAI
Details
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Severity
9.8 (Critical)
{
"affected": [],
"aliases": [
"CVE-2026-77493"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-09-08T18:20:35Z",
"severity": "CRITICAL"
},
"details": "Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.",
"id": "GHSA-3ww2-qgp7-jhww",
"modified": "2026-09-08T18:33:19Z",
"published": "2026-09-08T18:33:19Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77493"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77493"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-3X9F-3C9H-X7GJ
Vulnerability from github – Published: 2024-09-10 18:30 – Updated: 2024-09-10 18:30
VLAI
Details
Windows Graphics Component Elevation of Privilege Vulnerability
Severity
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2024-38247"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-10T17:15:29Z",
"severity": "HIGH"
},
"details": "Windows Graphics Component Elevation of Privilege Vulnerability",
"id": "GHSA-3x9f-3c9h-x7gj",
"modified": "2024-09-10T18:30:46Z",
"published": "2024-09-10T18:30:46Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38247"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38247"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-3X9F-9PXV-Q52X
Vulnerability from github – Published: 2023-01-06 21:30 – Updated: 2025-04-09 21:30
VLAI
Details
The DUBAI module has a double free vulnerability.Successful exploitation of this vulnerability may affect system availability.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2022-47975"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-01-06T20:15:00Z",
"severity": "HIGH"
},
"details": "The DUBAI module has a double free vulnerability.Successful exploitation of this vulnerability may affect system availability.",
"id": "GHSA-3x9f-9pxv-q52x",
"modified": "2025-04-09T21:30:35Z",
"published": "2023-01-06T21:30:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47975"
},
{
"type": "WEB",
"url": "https://consumer.huawei.com/en/support/bulletin/2023/1"
},
{
"type": "WEB",
"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202301-0000001435541166"
},
{
"type": "WEB",
"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-3XQ4-8C55-JFWQ
Vulnerability from github – Published: 2022-07-23 00:00 – Updated: 2022-07-30 00:00
VLAI
Details
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859
Severity
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2022-2327"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-07-22T10:15:00Z",
"severity": "HIGH"
},
"details": "io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859",
"id": "GHSA-3xq4-8c55-jfwq",
"modified": "2022-07-30T00:00:18Z",
"published": "2022-07-23T00:00:25Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2327"
},
{
"type": "WEB",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y\u0026id=df3f3bb5059d20ef094d6b2f0256c4bf4127a859"
},
{
"type": "WEB",
"url": "https://kernel.dance/#df3f3bb5059d20ef094d6b2f0256c4bf4127a859"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20230203-0009"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-42QM-8J3V-68C9
Vulnerability from github – Published: 2025-03-07 18:31 – Updated: 2025-09-23 15:31
VLAI
Details
A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory.
We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later
Severity
{
"affected": [],
"aliases": [
"CVE-2024-53698"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-07T17:15:20Z",
"severity": "LOW"
},
"details": "A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.2.3.3006 build 20250108 and later\nQuTS hero h5.2.3.3006 build 20250108 and later",
"id": "GHSA-42qm-8j3v-68c9",
"modified": "2025-09-23T15:31:08Z",
"published": "2025-03-07T18:31:06Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53698"
},
{
"type": "WEB",
"url": "https://www.qnap.com/en/security-advisory/qsa-24-54"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-43MR-MM46-M2QQ
Vulnerability from github – Published: 2024-02-20 15:31 – Updated: 2024-02-20 15:31
VLAI
Details
A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
Severity
8.7 (High)
{
"affected": [],
"aliases": [
"CVE-2023-38562"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-20T15:15:08Z",
"severity": "HIGH"
},
"details": "A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.",
"id": "GHSA-43mr-mm46-m2qq",
"modified": "2024-02-20T15:31:05Z",
"published": "2024-02-20T15:31:05Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38562"
},
{
"type": "WEB",
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1829"
},
{
"type": "WEB",
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1829"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-464V-QW54-XXXF
Vulnerability from github – Published: 2021-12-08 00:01 – Updated: 2021-12-09 00:01
VLAI
Details
There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash.
{
"affected": [],
"aliases": [
"CVE-2021-37072"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-12-07T17:15:00Z",
"severity": "HIGH"
},
"details": "There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash.",
"id": "GHSA-464v-qw54-xxxf",
"modified": "2021-12-09T00:01:34Z",
"published": "2021-12-08T00:01:16Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-37072"
},
{
"type": "WEB",
"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727"
}
],
"schema_version": "1.4.0",
"severity": []
}
GHSA-489P-VFCX-X55R
Vulnerability from github – Published: 2026-04-22 15:31 – Updated: 2026-04-27 15:30
VLAI
Details
In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Fix double free in dma-buf feature
The error path through vfio_pci_core_feature_dma_buf() ignores its own advice to only use dma_buf_put() after dma_buf_export(), instead falling through the entire unwind chain. In the unlikely event that we encounter file descriptor exhaustion, this can result in an unbalanced refcount on the vfio device and double free of allocated objects.
Avoid this by moving the "put" directly into the error path and return the errno rather than entering the unwind chain.
Severity
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2026-31468"
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-04-22T14:16:43Z",
"severity": "HIGH"
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pci: Fix double free in dma-buf feature\n\nThe error path through vfio_pci_core_feature_dma_buf() ignores its\nown advice to only use dma_buf_put() after dma_buf_export(), instead\nfalling through the entire unwind chain. In the unlikely event that\nwe encounter file descriptor exhaustion, this can result in an\nunbalanced refcount on the vfio device and double free of allocated\nobjects.\n\nAvoid this by moving the \"put\" directly into the error path and return\nthe errno rather than entering the unwind chain.",
"id": "GHSA-489p-vfcx-x55r",
"modified": "2026-04-27T15:30:38Z",
"published": "2026-04-22T15:31:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31468"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/83ad334afc9a645cef1062f5346526b1e36d6516"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/e98137f0a874ab36d0946de4707aa48cb7137d1c"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-497X-JCXF-M478
Vulnerability from github – Published: 2026-05-07 21:30 – Updated: 2026-09-15 12:31
VLAI
Details
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2026-33811"
],
"database_specific": {
"cwe_ids": [
"CWE-1341",
"CWE-415"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-05-07T20:16:42Z",
"severity": "HIGH"
},
"details": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.",
"id": "GHSA-497x-jcxf-m478",
"modified": "2026-09-15T12:31:36Z",
"published": "2026-05-07T21:30:29Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54500"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54556"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54584"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54602"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54603"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56340"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56785"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56789"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50336"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:51194"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:51341"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:53412"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:53413"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:53415"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:53530"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54168"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54191"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56790"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:61313"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65126"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65534"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:65886"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:67149"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:67287"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:67319"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"type": "WEB",
"url": "https://go.dev/cl/767860"
},
{
"type": "WEB",
"url": "https://go.dev/issue/78803"
},
{
"type": "WEB",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"type": "WEB",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
},
{
"type": "WEB",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56852"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56855"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56910"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56912"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:56913"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57191"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57482"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57488"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:59467"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:59559"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:60018"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:60025"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:60302"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:60520"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36617"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36776"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:38504"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:39266"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:39272"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:39319"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22112"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22120"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22121"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33120"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33123"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33142"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33150"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:35832"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:35993"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:35994"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:35995"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42946"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:40119"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42082"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42132"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
Mitigation
Architecture and Design
Choose a language that provides automatic memory management.
Mitigation
Implementation
Ensure that each allocation is freed only once. After freeing a chunk, set the pointer to NULL to ensure the pointer cannot be freed again. In complicated error conditions, be sure that clean-up routines respect the state of allocation properly. If the language is object oriented, ensure that object destructors delete each chunk of memory only once.
Mitigation
Implementation
Use a static analysis tool to find double free instances.
No CAPEC attack patterns related to this CWE.