platform/x86: think-lmi: Fix memory leak when showing current settings (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix memory leak when showing current settings When retriving a item string with tlmi_setting(), the result has to be freed using kfree(). In current_value_show() however, malformed item strings are not freed, causing a memory leak. Fix this by eliminating the early return responsible for this.
References
European references
- ENISA EUVD · EUVD-2023-60166
- GCVE · GCVE-0-2023-53830
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 0fdf10e5fc964c315cf131a2eaab9cc531a9f40f < b9396d991abe8d1ac31a043274ab20b49f92c2e6 ; affected 0fdf10e5fc964c315cf131a2eaab9cc531a9f40f < 9071525bfcb1f5674117dbed3eca0cd7b122813b ; affected 0fdf10e5fc964c315cf131a2eaab9cc531a9f40f < 5f99014c19fa50a5719c0bb78143282632675893 ; affected 0fdf10e5fc964c315cf131a2eaab9cc531a9f40f < a3c4c053014585dcf20f4df954791b74d8a8afcd |
| Linux · Linux | affected 5.14 ; unaffected 0 < 5.14 ; unaffected 5.15.107 ≤ 5.15.* ; unaffected 6.1.24 ≤ 6.1.* ; unaffected 6.2.11 ≤ 6.2.* ; unaffected 6.3 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |