CVE-2026-93116

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: asus-wmi: fix resource leaks on probe failure

During driver initialization in asus_wmi_add(), various subsystems are

registered sequentially. However, the error path labels are out of order

relative to the registration sequence.

Specifically:

1. If asus_wmi_custom_fan_curve_init() fails, the driver jumps to

fail_custom_fan_curve. Because this label is placed below fail_sysfs,

it bypasses the cleanup calls for the input device and sysfs groups,

which were successfully registered before, leaking those resources.

2. If asus_screenpad_init() fails, the driver jumps to fail_screenpad.

Because fail_screenpad is placed below fail_backlight, it bypasses the

cleanup calls for backlight and rfkill, leaking those resources.

Fix these resource leaks by reordering the error path labels in

asus_wmi_add() to match the exact reverse order of the resource

allocations.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References