CVE-2023-53830

A memory leak was found in the Lenovo ThinkPad LMI driver in the Linux kernel. When current_value_show() encounters malformed item strings from tlmi_setting(), it returns early without freeing the allocated memory. Repeated reads of sysfs attributes could gradually exhaust kernel memory.

This affects only Lenovo ThinkPad systems using the think-lmi driver. An attacker would need local access and sustained interaction with sysfs to cause noticeable memory pressure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the think-lmi module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.