CVE-2026-97504
Received Received - Intake

Use-After-Free and Resource Leak in Lenovo SE10 Watchdog Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk Review by sashiko.dev highlighted potential use after free and resource leak instances. Set se10_pdev to null to prevent use after free Remove DMI call back and instead directly call se10_create_platform_device. Handle error cases appropriately

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97504
EUVD
EUVD-2026-86102

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
lenovo lenovo_se10_wdt *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a use-after-free and resource leak risk in the Lenovo SE10 watchdog timer driver. The issue was caused by improper handling of the se10_pdev pointer, which could lead to memory corruption or resource exhaustion.

Detection Guidance

This vulnerability is specific to the Linux kernel module lenovo_se10_wdt. Detection requires checking for the presence of the vulnerable module and potential use-after-free or resource leak conditions. Inspect loaded kernel modules with lsmod | grep lenovo_se10_wdt. Review kernel logs for errors related to watchdog operations using dmesg | grep -i watchdog or journalctl -k | grep -i watchdog.

Impact Analysis

If exploited, this vulnerability could cause system instability, crashes, or denial of service due to memory corruption or resource exhaustion. It may also allow privilege escalation if an attacker gains control of the affected system.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves this issue. If the lenovo_se10_wdt module is not required, unload it using rmmod lenovo_se10_wdt. Ensure no applications depend on this module before removal. Monitor system logs for any recurrence of the issue after mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97504. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart