CVE-2026-81018 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: think-lmi: Free system certificate signatures

Multi-certificate support also allows the system authentication object
to store ->signature and ->save_signature, which leak when the driver is
removed. Free the signatures to avoid leaking memory.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/9c28adde051fe76a7754856d0a414ab89adcaa4d
https://git.kernel.org/stable/c/abbcc0354108cf47a6055b951182bf73520d0363
https://git.kernel.org/stable/c/abca989604f60fe29d7170431f819e28ec7d868a

History

Fri, 11 Sep 2026 23:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store ->signature and ->save_signature, which leak when the driver is removed. Free the signatures to avoid leaking memory.
Title		platform/x86: think-lmi: Free system certificate signatures
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/9c28adde051fe76a7754856d0a414ab89adcaa4d https://git.kernel.org/stable/c/abbcc0354108cf47a6055b951182bf73520d0363 https://git.kernel.org/stable/c/abca989604f60fe29d7170431f819e28ec7d868a

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-11T19:43:06.080Z

Updated: 2026-09-11T19:43:06.080Z

Reserved: 2026-08-26T14:34:25.813Z

Link: CVE-2026-81018

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-11T20:19:10.813

Modified: 2026-09-11T20:19:10.813

Link: CVE-2026-81018

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-81018", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-26T14:34:25.813Z", "datePublished": "2026-09-11T19:43:06.080Z", "dateUpdated": "2026-09-11T19:43:06.080Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-11T19:43:06.080Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: think-lmi: Free system certificate signatures\n\nMulti-certificate support also allows the system authentication object\nto store ->signature and ->save_signature, which leak when the driver is\nremoved. Free the signatures to avoid leaking memory."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/platform/x86/lenovo/think-lmi.c"], "versions": [{"version": "5dcb5ef125907d09806509a9db8c6705041e0026", "lessThan": "9c28adde051fe76a7754856d0a414ab89adcaa4d", "status": "affected", "versionType": "git"}, {"version": "5dcb5ef125907d09806509a9db8c6705041e0026", "lessThan": "abbcc0354108cf47a6055b951182bf73520d0363", "status": "affected", "versionType": "git"}, {"version": "5dcb5ef125907d09806509a9db8c6705041e0026", "lessThan": "abca989604f60fe29d7170431f819e28ec7d868a", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/platform/x86/lenovo/think-lmi.c"], "versions": [{"version": "6.13", "status": "affected"}, {"version": "0", "lessThan": "6.13", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.50", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "6.18.50"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/9c28adde051fe76a7754856d0a414ab89adcaa4d"}, {"url": "https://git.kernel.org/stable/c/abbcc0354108cf47a6055b951182bf73520d0363"}, {"url": "https://git.kernel.org/stable/c/abca989604f60fe29d7170431f819e28ec7d868a"}], "title": "platform/x86: think-lmi: Free system certificate signatures", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/platform/x86/lenovo/think-lmi.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "9c28adde051fe76a7754856d0a414ab89adcaa4d", "status": "affected", "version": "5dcb5ef125907d09806509a9db8c6705041e0026", "versionType": "git"}, {"lessThan": "abbcc0354108cf47a6055b951182bf73520d0363", "status": "affected", "version": "5dcb5ef125907d09806509a9db8c6705041e0026", "versionType": "git"}, {"lessThan": "abca989604f60fe29d7170431f819e28ec7d868a", "status": "affected", "version": "5dcb5ef125907d09806509a9db8c6705041e0026", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/platform/x86/lenovo/think-lmi.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.13"}, {"lessThan": "6.13", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.50", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: think-lmi: Free system certificate signatures\n\nMulti-certificate support also allows the system authentication object\nto store ->signature and ->save_signature, which leak when the driver is\nremoved. Free the signatures to avoid leaking memory."}], "id": "CVE-2026-81018", "lastModified": "2026-09-11T20:19:10.813", "metrics": {}, "published": "2026-09-11T20:19:10.813", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9c28adde051fe76a7754856d0a414ab89adcaa4d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/abbcc0354108cf47a6055b951182bf73520d0363"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/abca989604f60fe29d7170431f819e28ec7d868a"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}