Skip to content
OpenAdvisories

Weakness (CWE)

CWE-672: Operation on a Resource after Expiration or Release

Class Draft

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

Source: MITRE CWE-672

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.8
    CVE-2026-23111 Public exploit

    netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.3
    CVE-2024-45244 Public exploit

    Hyperledger Fabric does not verify request has a timestamp within the expected time window

    Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.

    github.com/hyperledger/fabric Go
  • Low 2.5
    CVE-2022-27499 Public exploit

    Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to …

  • Critical 9.4
    CVE-2019-17638 Public exploit EPSS 11%

    Operation on a Resource after Expiration or Release in Jetty Server

    In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the Byte…

    The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Maven
  • Medium 6.1
    CVE-2020-11027 Public exploit EPSS 14%

    Password reset links invalidation issue in WordPress

    In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a malicious party for successful execution. This has been patched in version…

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  • High 7.1
    CVE-2019-15794 Public exploit

    Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs

    Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for t…

    Ubuntu Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2019-15791 Public exploit

    Reference count underflow in shiftfs

    In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the …

    Ubuntu Shiftfs in the Linux kernel linux-raspi2 linux-riscv Linux Ubuntu