CWEweakness
CWE-672 Operation on a Resource after Expiration or Release
- Abstraction
- Class
- Structure
- Simple
- Status
- Draft
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.
Common consequences
• Integrity, Confidentiality: Modify Application Data, Read Application Data — If a released resource is subsequently reused or reallocated, then an attempt to use the original resource might allow access to sensitive data that is associated with a different user or entity.
• Other, Availability: Other, DoS: Crash, Exit, or Restart — When a resource is released it might not be in an expected state, later attempts to access the resource may lead to resultant errors that may lead to a crash.
Detection methods
• Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)
Observed examples
• CVE-2009-3547: Chain: race condition (CWE-362) might allow resource to be released before operating on it, leading to NULL dereference (CWE-476)
Related
Observed example · CVE (1)
- CVE-2009-3547 Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer… vulnerability
Child of · CWE (1)
- CWE-666 Operation on Resource in Wrong Phase of Lifetime weakness
Referenced by CVE · weakness (106)
- CVE-2026-93006 A flaw was found in dnsmasq. vulnerability
- CVE-2026-115402 OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition… vulnerability
- CVE-2026-53918 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. vulnerability
- CVE-2026-57446 libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. vulnerability
- CVE-2026-106310 Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… vulnerability
- CVE-2026-106320 Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process… vulnerability
- CVE-2026-106339 Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process… vulnerability
- CVE-2026-106345 Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… vulnerability
- CVE-2026-96589 When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access as a collaborator so… vulnerability
- CVE-2026-95366 Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process… vulnerability
- CVE-2026-98080 In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during… vulnerability
- CVE-2026-98124 In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations… vulnerability
- CVE-2026-53637 Sylius is an Open Source eCommerce Framework on Symfony. vulnerability
- CVE-2026-55250 Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability… vulnerability
- CVE-2026-61699 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. vulnerability
- CVE-2026-85044 Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social… vulnerability
- CVE-2026-19538 The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when… vulnerability
- CVE-2026-79010 Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had… vulnerability
- CVE-2026-44725 EMQX is a scalable and reliable MQTT broker for AI, IoT, IIoT, and connected vehicles. vulnerability
- CVE-2026-50575 BetterDesk is a remote desktop management solution. vulnerability
- CVE-2026-52733 ZEBRA is a Zcash node written entirely in Rust. vulnerability
- CVE-2026-72108 In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure… vulnerability
- CVE-2026-68481 In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports… vulnerability
- CVE-2026-42955 In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family… vulnerability
- CVE-2026-47087 An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. vulnerability
- CVE-2026-58291 Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose… vulnerability
- CVE-2026-56314 Capgo before 12.128.12 fails to filter deleted app versions when joining channels during /updates resolution, allowing deleted bundles to… vulnerability
- CVE-2026-2379 On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibit unexpected… vulnerability
- CVE-2026-33463 Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. vulnerability
- CVE-2026-42791 Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows forged OCSP responses signed with an… vulnerability