Missing Release of File Descriptor or Handle after Effective Lifetime
CWE-775
The product does not release a file descriptor or handle after its effective lifetime has ended, i.e., after the file descriptor/handle is no longer needed.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 7.9.
Latest Missing Release of File Descriptor or Handle after Effective Lifetime vulnerabilities
- 7.9 High severity
Red Hat Enterprise Linux 10: Missing Release of File Descriptor or Handle after Effective Lifetime
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the