All vulnerabilities
CVE-2026-97504

Linux: watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk

Linux LinuxOperating systems
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3394e894880a60338a2981dd688fd25e88d79667Fixed versionCVE List
Published24 Sep 2026Updated 28 Sep 2026CVE List

What fixes it

  • 3394e894880a60338a2981dd688fd25e88d79667LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk

Review by sashiko.dev highlighted potential use after free and resource leak instances.

Set se10_pdev to null to prevent use after free

Remove DMI call back and instead directly call se10_create_platform_device. Handle error cases appropriately

Text from CVE List

Affected versions 8

  • Linuxaffected: 1f6602c8ed1eccac4fa83e338d02aafe3a0e2c0a before e9adbc3a116dfa8c7b643180dabf6166c99bcec7CVE List
  • Linuxaffected: 1f6602c8ed1eccac4fa83e338d02aafe3a0e2c0a before c9f1fb55646534370b00824a1fdb47718c72f115CVE List
  • Linuxaffected: 1f6602c8ed1eccac4fa83e338d02aafe3a0e2c0a before 3394e894880a60338a2981dd688fd25e88d79667CVE List
  • Linuxaffected: 6.10CVE List
  • Linuxunaffected: all versions before 6.10CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 3