CVE-2023-54252

platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings

N/A
Published: December 30, 2025 at 12:15 PM UTC
Updated: June 17, 2026 at 06:47 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings My previous commit introduced a memory leak where the item allocated from tlmi_setting was not freed. This commit also renames it to avoid confusion with the similarly name variable in the same function.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.15.106 ≤ v < 5.15.1076.1.23 ≤ v < 6.1.246.2.10 ≤ v < 6.2.115.15.1066.1.236.2.108a02d70679fc1c434401863333c8ea7dbf201494c9c542eba4edf8d061bd2e5007cf598625e112dfdae47bf0222e1e0eb6684c7e141b7170b0884a4cf0a67ad7dce49d93570edc795e0312bb787f19bb
Vendor states this is fixed in 081da7b1c881828244b93b3befb7c18389f696bb (fixed)
Vendor states this is fixed in 43fc0342bac1808fda2b76184e43414727111c6b (fixed)
Vendor states this is fixed in cccdb30935c82be805d3362a15680b95d5cb3ee0 (fixed)
Vendor states this is fixed in e7d796fccdc8d17c2d21817ebe4c7bf5bbfe5433 (fixed)
Affected range stops below 5.15.107, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.1.24, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.2.11, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card