SB20260816376 - Improper resource shutdown or release in Linux kernel x86 dell driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260816376

SB20260816376 - Improper resource shutdown or release in Linux kernel x86 dell driver

Published: August 16, 2026

Security Bulletin ID SB20260816376
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper resource shutdown or release (CVE-ID: CVE-2026-72144)

CWE-ID: CWE-404 - Improper Resource Shutdown or Release

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper resource shutdown or release in dell_init() in the dell-laptop driver when handling initialization errors after resource registration. A local user can trigger an initialization failure path to cause a denial of service.

The issue occurs after rfkill setup when later LED or backlight registration fails, leaving the notifier, debugfs directory, keyboard backlight LED, or optional touchpad LED registered despite initialization failure.


Remediation

Install update from vendor's website.

References