Description
In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell-wmi-base: Fix resource leak on module load failure

We need to properly clean up the SMBIOS request and the privacy driver
when the module load fails.
Published: 2026-09-17
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Resource Leak leading to potential denial of service
Action: Apply kernel update
AI Analysis

Impact

The vulnerability is a resource leak that occurs when the Dell WMI base module in the Linux kernel fails to load. Because cleanup of SMBIOS requests and the privacy driver is not performed on load failure, memory and other resources can accumulate over time. Accumulation may cause the kernel to exhaust available memory or other critical resources, potentially degrading performance or causing a system to become unstable or restart, which constitutes a denial‑of‑service scenario.

Affected Systems

All Linux kernel installations that include the Dell‑WMI‑Base module are potentially affected. The vulnerability can affect any distribution that ships the module without disabling it, and version information was not supplied, meaning any kernel containing the module is potentially vulnerable until the corresponding fix is applied.

Risk and Exploitability

The EPSS score is below 1 %, indicating a very low probability of exploitation in the wild. The CVSS score is 5.5, indicating medium severity. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require an attacker to trigger a module load failure, which is likely a local privilege scenario involving the ability to load kernel modules. While no remote attack vector is documented, the risk remains moderate due to the potential for denial of service if the leak is significant.

Generated by OpenCVE AI on September 24, 2026 at 01:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the Linux kernel to a release that includes the dell‑wmi‑base resource‑leak fix.
  • If an update is not possible, disable the dell‑wmi‑base module to prevent load attempts.
  • Monitor kernel logs for SMBIOS cleanup errors and observe memory usage patterns to detect potential leakage.

Generated by OpenCVE AI on September 24, 2026 at 01:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4817-1 linux-6.12 security update
Debian DSA Debian DSA DSA-6528-1 linux security update
History

Thu, 24 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low


Sat, 19 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-404

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS request and the privacy driver when the module load fails.
Title platform/x86: dell-wmi-base: Fix resource leak on module load failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-17T16:11:33.275Z

Reserved: 2026-09-17T16:02:15.087Z

Link: CVE-2026-93130

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-17T17:18:07.797

Modified: 2026-09-17T17:18:07.797

Link: CVE-2026-93130

cve-icon Redhat

Severity : Low

Publid Date: 2026-09-17T00:00:00Z

Links: CVE-2026-93130 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-24T02:00:14Z

Weaknesses
  • CWE-404

    Improper Resource Shutdown or Release

  • CWE-772

    Missing Release of Resource after Effective Lifetime