CVE-2026-93130
NoneCVSS
—
EPSS
0.2%
Published
Sep 17, 2026
CISA due date
—
Cloudanix analysis
A small memory cleanup error in Dell laptop support code could slowly use up system resources if the code keeps failing to start, but it is hard for attackers to trigger and only affects certain hardware.
- Exploitation
- Local Privilege
- Attacker needs
- Local User
- Complexity
- Theoretical
- Impact
- Other
- Component
- OS kernel
- Class
- Other
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Resource leak occurs when the dell-wmi-base kernel module fails to load, leaving SMBIOS request structures and privacy driver resources allocated without cleanup.
Why it matters to the business
Repeated module load failures on affected Dell systems can gradually exhaust kernel memory and handles, potentially leading to degraded performance or instability in long-running environments with high module churn.
How an attack unfolds
An attacker with local access triggers repeated failures during module initialization (for example via crafted hardware or configuration conditions) to accumulate leaked resources until system impact occurs; no remote or unauthenticated path exists.
How to fix it
Apply the upstream kernel patch that adds proper cleanup of SMBIOS requests and privacy driver resources on load failure; rebuild and deploy updated kernel images to affected systems.
How to confirm the fix worked
Inspect the dell-wmi-base module initialization code for the presence of the cleanup paths on error returns; verify the fix is present by reviewing the module source or testing load-failure scenarios in a lab kernel build.
Typical attack path
- Obtain local user or privileged access on a Dell system running the vulnerable kernel module.
- Induce module load failure conditions through configuration manipulation or hardware state changes.
- Repeat the failure scenario to accumulate un-freed SMBIOS and privacy driver resources.
- Monitor for system-level effects such as memory pressure or handle exhaustion.
How to detect it
Review kernel ring buffer and dmesg logs for dell-wmi-base initialization error paths that precede resource cleanup; correlate with system memory or handle usage trends over time on Dell platforms.
What your security team should do
- Prioritize patching Dell systems running the affected kernel module within normal maintenance windows given low EPSS and lack of KEV listing.
- Monitor kernel logs for repeated dell-wmi-base load failures as an operational health signal.
- Limit unnecessary module loading through kernel configuration where Dell hardware is not present.
The record
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS request and the privacy driver when the module load fails.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|