CVE-2026-63839

CVE-2026-63839

published July 19, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int()

lwmi_dev_evaluate_int() leaks output.pointer when retval == NULL (found

by sashiko.dev [1]).

Fix it by moving `ret_obj = output.pointer' outside of the `if (retval)'

block so that it is always freed by the __free cleanup callback.

No functional change intended.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-07-19T19:16Z
References (3)
EPSS history
Timeline
  • 19 JUL 14:04Z
    platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int()
    cvelistv5