CVE-2026-97504

CVE-2026-97504

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk

Review by sashiko.dev highlighted potential use after free and resource

leak instances.

Set se10_pdev to null to prevent use after free

Remove DMI call back and instead directly call

se10_create_platform_device. Handle error cases appropriately

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Published
2026-09-24T21:17Z
References (3)
https://git.kernel.org/stable/c/3394e894880a60338a2981dd688fd25e88d79667 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c9f1fb55646534370b00824a1fdb47718c72f115 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e9adbc3a116dfa8c7b643180dabf6166c99bcec7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 16:04Z
    watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk
    cvelistv5