This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-81018 →

DEBIAN-CVE-2026-81018

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate su...

Original description

The description as published by the source.

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store ->signature and ->save_signature, which leak when the driver is removed. Free the signatures to avoid leaking memory.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:14 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.6-1"}]}]

References

advisory security-tracker.debian.org