CVE-2026-81018: platform/x86: think-lmi: Free system certificate signatures
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: think-lmi: Free system certificate signatures
Multi-certificate support also allows the system authentication object to store ->signature and ->savesignature, which leak when the driver is removed. Free the signatures to avoid leaking memory.
Event History
Frequently Asked Questions
When can this memory leak occur?
The leak occurs when the think-lmi driver is removed after the system authentication object has stored signature and save_signature data under multi-certificate support.
What is the practical impact?
The provided information identifies a memory leak caused by certificate signature buffers not being freed during driver removal. No information is provided about remote exploitation, privilege requirements, or effects beyond memory leakage.
What should be done to remediate it?
Apply a Linux kernel update containing the fix referenced in the provided stable kernel commits. The fix frees the stored system certificate signatures when the driver is removed.