CWE · MITRE source
CWE-775Missing Release of File Descriptor or Handle after Effective Lifetime
The product does not release a file descriptor or handle after its effective lifetime has ended, i.e., after the file descriptor/handle is no longer needed.
When a file descriptor or handle is not released after use (typically by explicitly closing it), attackers can cause a denial of service by consuming all available file descriptors/handles, or otherwise preventing other system processes from obtaining their own file descriptors/handles.
Last updated: 15 October 2026 14:21 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2017-8452 UPD | 6.1 | 7.5 | 0.0138 | 2017-06-16 |
CVE-2016-8819 UPD | 5.8 | 7.8 | 0.0037 | 2016-12-16 |
CVE-2024-24444 UPD | 5.8 | 7.5 | 0.0043 | 2025-01-21 |
CVE-2026-78408 | 5.5 | 7.9 | 0.0019 | 2026-09-02 |
CVE-2019-25557 | 4.7 | 6.2 | 0.0018 | 2026-03-21 |
CVE-2025-53476 UPD | 4.5 | 5.3 | 0.0046 | 2025-10-07 |
CVE-2026-106575 | 4.4 | 5.3 | 0.0037 | 2026-10-07 |
CVE-2025-13751 UPD | 4.2 | 5.5 | 0.0017 | 2025-12-03 |
CVE-2026-45287 UPD | 4.2 | 5.5 | 0.0018 | 2026-06-04 |
CVE-2026-110831 | 3.6 | 4.3 | 0.0023 | 2026-10-14 |