Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.

...

GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.

...

PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release fwnode that could lead to memory corruption...

PT-2025-35955

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A double-free vulnerability exists in the i2c core, specifically within the i2c unregister device function. This issue occurs when an i2c client has a software fwnode as its primary...

Linux Distros Unpatched Vulnerability : CVE-2025-5262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the bfa driver not setting the im pointer correctly resulting in a double release...

Linux Distros Unpatched Vulnerability : CVE-2010-4150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double free vulnerability in the imapdoopen function in the IMAP extension ext/imap/phpimap.c in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to...

Linux Distros Unpatched Vulnerability : CVE-2018-14054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is...

In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7.

...

netfs: Fix double put of request

...

btrfs: fix double accounting race when btrfs_run_delalloc_range() failed

...

firmware: arm_scmi: Fix double free in SMC transport cleanup path

...

exfat: fix double free in delayed_free

...

GNU Bison scan-code.c code_free double free

...

CLSA-2025-1756930773 glibc: Fix of CVE-2025-8058

CVE-2025-8058: fix double free vulnerability in regcomp function...

Linux Distros Unpatched Vulnerability : CVE-2019-2126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code executio...

Linux Distros Unpatched Vulnerability : CVE-2016-9187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unrestricted file upload vulnerability in the double extension support in the image module in Moodle 3.1.2 allows remote authenticated users to execute arbitrar...

Linux Distros Unpatched Vulnerability : CVE-2023-43281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbiloadgifmain functio...

GHSA-3632-54Q8-M96X arenavec has multiple memory corruption vulnerabilities in safe APIs

The crate has the following vulnerabilities: - The public trait arenavec::common::AllocHandle allows the return of raw pointers through its methods allocate and allocateorextend. However, the trait is not marked as unsafe, meaning users of the crate may implement it under the assumption that the...