platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (Linux Linux)

CVE-2023-54252
Not available

At a glance

Source
NVD
EPSS
EPSS 0.20 % · percentile 10 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Deferred

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings My previous commit introduced a memory leak where the item allocated from tlmi_setting was not freed. This commit also renames it to avoid confusion with the similarly name variable in the same function.

References

European references

CERT-FR advisories

Affected products

ProductVersions
Linux · Linuxaffected dae47bf0222e1e0eb6684c7e141b7170b0884a4c < cccdb30935c82be805d3362a15680b95d5cb3ee0 ; affected f0a67ad7dce49d93570edc795e0312bb787f19bb < 081da7b1c881828244b93b3befb7c18389f696bb ; affected c9c542eba4edf8d061bd2e5007cf598625e112df < 43fc0342bac1808fda2b76184e43414727111c6b ; affected 8a02d70679fc1c434401863333c8ea7dbf201494 < e7d796fccdc8d17c2d21817ebe4c7bf5bbfe5433
Linux · Linuxaffected 5.15.106 < 5.15.107 ; affected 6.1.23 < 6.1.24 ; affected 6.2.10 < 6.2.11

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD