Weaknesses of type CWE-911

16 results

Atualização Incorreta de Contagem de Referências

Fraqueza em gerenciamento de memória onde o código não incrementa ou decrementa corretamente contadores de referência de objetos. Quando a contagem não reflete o uso real, objetos podem ser liberados enquanto ainda estão em uso (causando acesso à memória inválida) ou nunca ser liberados (vazamento de memória).

Example

Um driver de dispositivo rastreia quantas vezes um recurso é aberto, mas esquece de decrementar o contador quando uma operação é cancelada. O recurso é liberado prematuramente enquanto código ainda tenta acessá-lo, causando crash ou exploração.

How to mitigate

Implemente mecanismos automáticos de contagem (smart pointers, garbage collection) e revise criticamente todo incremento/decremento de contadores em fluxos normais e de erro. Use testes de stress e verificadores estáticos para detectar descasamentos entre alocação e liberação.

CVE-2022-1678MEDIUMAn issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns lEPSS 3.0%CVE-2022-37012HIGHThis vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+EPSS 1.8%CVE-2022-22195HIGHJunos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crashEPSS 1.0%CVE-2022-29581HIGHImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. TEPSS 0.9%CVE-2024-43102CRITICALumtx Kernel panic or Use-After-FreeEPSS 0.7%CVE-2023-22394HIGHJunos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls EPSS 0.6%CVE-2026-42534MEDIUMJostle logic bypass degrades resolution performanceEPSS 0.6%CVE-2026-46316CRITICALKVM: arm64: vgic-its: Drop the translation cache reference only for the erased entryEPSS 0.4%CVE-2023-2019MEDIUMA flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper manageEPSS 0.3%CVE-2026-46099HIGHnet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnelsEPSS 0.3%CVE-2023-5633HIGHKernel: vmwgfx: reference count issue leads to use-after-free in surface handlingEPSS 0.3%CVE-2021-47327HIGHiommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get failsEPSS 0.3%CVE-2026-52943HIGHnet: skbuff: fix missing zerocopy reference in pskb_carve helpersEPSS 0.2%CVE-2024-45783MEDIUMGrub2: fs/hfs+: refcount can be decremented twiceEPSS 0.2%CVE-2020-11935MEDIUMaufs: improperly managed inode reference counts in the vfsub_dentry_open() methodEPSS 0.2%CVE-2024-46972HIGHGPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fenceEPSS 0.2%