SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63839

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's Lenovo WMI helpers, specifically in the lwmi_dev_evaluate_int() function, which can lead to a memory leak when the return value is NULL. This issue could potentially degrade system performance over time due to increased memory consumption. Organizations using affected Linux distributions, particularly those with Lenovo hardware, should prioritize applying the fix to maintain optimal system performance and resource management.

CVE
CVE-2026-63839
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int() lwmi_dev_evaluate_int() leaks output.pointer when retval == NULL (found by sashiko.dev [1]). Fix it by moving `ret_obj = output.pointer' outside of the `if (retval)' block so that it is always freed by the __free cleanup callback. No functional change intended.