CVE-2023-53830 — Missing Release of Resource after Effective Lifetime in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: think-lmi: Fix memory leak when showing current settings
When retriving a item string with tlmi_setting(), the result has to be
freed using kfree(). In current_value_show() however, malformed
item strings are not freed, causing a memory leak.
Fix this by eliminating the early return responsible for this.
Affected Packages4 packages
▶CVEListV5linux/linux0fdf10e5fc964c315cf131a2eaab9cc531a9f40f — b9396d991abe8d1ac31a043274ab20b49f92c2e6+4
🔴Vulnerability Details
3GHSA▶
GHSA-rhg6-xfgx-wqj9: In the Linux kernel, the following vulnerability has been resolved:
platform/x86: think-lmi: Fix memory leak when showing current settings
When retr↗2025-12-09
OSV▶
CVE-2023-53830: In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix memory leak when showing current settings When retriv↗2025-12-09