Vulnerability in Linux

CVE-2023-53830

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix memory leak when showing current settings When retriving a item string with tlmi_setting(), the result has to be freed using kfree(). In current_value_show() however, malformed item strings are not freed, causing a memory leak. Fix this by eliminating the early return responsible for this.

EPSS: 0.002 (11.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 0fdf10e5fc964c315cf131a2eaab9cc531a9f40f, 5.14, 0

References