The product attempts to close or release a resource or handle more than once, without any successful open between the close operations.
Volume of CVEs assigned to CWE-1341 and their average CVSS base score over time.
Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-23918HIGH Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.
This issue affects Apache HTTP Server: 2.4.66.
Users are recommended to upgrade to vers | May 4, 2026 | 8.8 | 82 | NO | YES |
CVE-2026-33811HIGH When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. | May 7, 2026 | 7.5 | 37 | NO | NO |
CVE-2026-45898CRITICAL In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix workqueue list corruption by removing work_list
The commit e1168f0 ("RDMA/iwcm: Simplify cm_eve | May 27, 2026 | 9.8 | 36 | NO | NO |
CVE-2026-43494HIGH In the Linux kernel, the following vulnerability has been resolved:
net/rds: reset op_nents when zerocopy page pin fails
When iov_iter_get_pages2() fails in rds_message_zcopy_fro | May 21, 2026 | 7.8 | 35 | NO | NO |
CVE-2026-52987HIGH In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: avoid double drm_exec_fini() in userq validate
When new_addition is true, amdgpu_userq_vm_validate | Jun 24, 2026 | 7.8 | 31 | NO | NO |
CVE-2026-46189HIGH In the Linux kernel, the following vulnerability has been resolved:
RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
Sashiko points out that pvrdma_uar_free | May 28, 2026 | 7.8 | 31 | NO | NO |
CVE-2026-43178HIGH In the Linux kernel, the following vulnerability has been resolved:
procfs: fix possible double mmput() in do_procmap_query()
When user provides incorrectly sized buffer for buil | May 6, 2026 | 7.8 | 29 | NO | NO |
CVE-2026-6654MEDIUM Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero. | Apr 20, 2026 | 5.1 | 21 | NO | NO |
Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.
Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.
Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.