Description
UAF vulnerability in the kernel module.
Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Published: 2026-04-13
Score: 5.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Availability and Confidentiality
Action: Apply Patch
AI Analysis

Impact

The vulnerability is a use‑after‑free in a kernel module. Successful exploitation can compromise the device’s availability and confidentiality, as stated in the official description.

Affected Systems

Huawei devices running EMUI or HarmonyOS are affected. The advisory does not list specific versions, so any release that includes the vulnerable kernel module may be at risk.

Risk and Exploitability

The CVSS score of 5.7 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, implying no known public exploits yet. Because the flaw resides in the kernel, the likely attack vector requires local or privileged access, as inferred from the nature of use‑after‑free bugs. The risk is non‑trivial if an attacker can gain such access.

Generated by OpenCVE AI on April 13, 2026 at 07:25 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check Huawei's official bulletin at https://consumer.huawei.com/en/support/bulletin/2026/4/ and download the latest firmware or platform update.
  • If no patch is available, limit execution of the vulnerable kernel module and enforce strict privilege limits.
  • Monitor device logs for anomalies such as kernel crashes or abnormal memory usage.

Generated by OpenCVE AI on April 13, 2026 at 07:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 13 Apr 2026 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 13 Apr 2026 14:30:00 +0000

Type Values Removed Values Added
Title Kernel Module Use‑After‑Free Leading to Availability and Confidentiality Impact

Mon, 13 Apr 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Huawei
Huawei emui
Huawei harmonyos
Vendors & Products Huawei
Huawei emui
Huawei harmonyos

Mon, 13 Apr 2026 05:15:00 +0000

Type Values Removed Values Added
Description UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 5.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2026-04-13T15:01:06.879Z

Reserved: 2026-03-31T01:11:13.700Z

Link: CVE-2026-34854

cve-icon Vulnrichment

Updated: 2026-04-13T15:01:03.200Z

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-04-13T05:16:03.200

Modified: 2026-04-13T15:01:43.663

Link: CVE-2026-34854

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-13T12:53:21Z

Weaknesses