CVE-2026-81018

Received Received - Intake

Memory Leak in Linux Kernel think-lmi Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store ->signature and ->save_signature, which leak when the driver is removed. Free the signatures to avoid leaking memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-10-01

NVD

CVE-2026-81018

EUVD

EUVD-2026-76341

Affected Vendors & Products

Vendor	Product	Version / Range
linux	kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the think-lmi driver. The driver allows storing system certificate signatures which are not properly freed when the driver is removed. This causes memory to leak, potentially reducing system performance or stability over time.

Detection Guidance

This vulnerability is specific to the Linux kernel's think-lmi driver and involves memory leaks from system certificate signatures. Detection requires checking for the presence of the vulnerable driver and inspecting memory usage patterns. Use commands like 'lsmod | grep think_lmi' to check if the driver is loaded and 'dmesg | grep think_lmi' to look for related kernel messages.

Impact Analysis

The main impact is memory exhaustion on the system where the vulnerable kernel is running. This could lead to degraded performance, crashes, or instability, especially if the driver is frequently loaded and unloaded.

Compliance Impact

This vulnerability involves memory leaks in the Linux kernel's think-lmi driver due to improper freeing of system certificate signatures. It does not directly impact compliance with standards like GDPR or HIPAA as it is a memory management issue rather than a data protection or privacy breach.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a patched version that resolves this issue. Check your distribution's security updates and apply them. If the think-lmi driver is not required, consider unloading it using 'modprobe -r think_lmi' to prevent potential exploitation.

Hi! I’m here to help you understand CVE-2026-81018. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70