CVE-2023-53830
BaseFortify
Publication date: 2025-12-09
Last updated on: 2025-12-09
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| think-lmi | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory leak in the Linux kernel's think-lmi component on the x86 platform. Specifically, when retrieving an item string with the function tlmi_setting(), the returned string must be freed using kfree(). However, in the current_value_show() function, malformed item strings were not freed properly due to an early return, causing a memory leak. The fix involved removing this early return to ensure all allocated memory is freed correctly.
How can this vulnerability impact me? :
The memory leak caused by this vulnerability can lead to increased memory usage over time, potentially degrading system performance or causing resource exhaustion. This could affect system stability, especially on systems that frequently use the think-lmi component to show current settings.