Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-63839

platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int()

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int() lwmi_dev_evaluate_int() leaks output.pointer when retval == NULL (found by sashiko.dev [1]). Fix it by moving `ret_obj = output.pointer' outside of the `if (retval)' block so that it is always freed by the __free cleanup callback. No functional change intended.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e521d16e76cd9ea99c585e064f4e7daf657b1451 to < ce493f9261cd3f4bffe2f72481d8c3ee01c559a3affected
  • e521d16e76cd9ea99c585e064f4e7daf657b1451 to < 40a984dd0602e238ad893b167751620e751d1199affected
  • e521d16e76cd9ea99c585e064f4e7daf657b1451 to < 0c3887a134f191723b53e2a47e501b534c8723eeaffected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.18.50 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References