Riskcovery

CVE-2023-52520

platform/x86: think-lmi: Fix reference leak

State
Published
Severity
Not scored
Published
Mar 2, 2024
Updated
May 11, 2026
Reserved
Feb 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: think-lmi: Fix reference leak

If a duplicate attribute is found using kset_find_obj(), a reference to that attribute is returned which needs to be disposed accordingly using kobject_put(). Move the setting name validation into a separate function to allow for this change without having to duplicate the cleanup code for this setting. As a side note, a very similar bug was fixed in commit 7295a996fdab ("platform/x86: dell-sysman: Fix reference leak"), so it seems that the bug was copied from that driver.

Compile-tested only.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1bcad8e510b27ad843315ab2c27ccf459e3acded to before 124cf0ea4b82e1444ec8c7420af4e7db5558c293Affected
  • 1bcad8e510b27ad843315ab2c27ccf459e3acded to before af21c9119a37cecb7ff27ce0c2f3cf721e9d0ec4Affected
  • 1bcad8e510b27ad843315ab2c27ccf459e3acded to before c6e3023579de8d33256771ac0745239029e81106Affected
  • 1bcad8e510b27ad843315ab2c27ccf459e3acded to before 528ab3e605cabf2f9c9bd5944d3bfe15f6e94f81Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.136 through 5.15.*Not affected
  • 6.1.59 through 6.1.*Not affected
  • 6.5.8 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.