Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-26836

platform/x86: think-lmi: Fix password opcode ordering for workstations

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix password opcode ordering for workstations The Lenovo workstations require the password opcode to be run before the attribute value is changed (if Admin password is enabled). Tested on some Thinkpads to confirm they are OK with this order too.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 640a5fa50a42b99bfa2a0ec51b4ea9591d9bd055 to < 2deb10a99671afda30f834e95e5b992a805bba6aaffected
  • 640a5fa50a42b99bfa2a0ec51b4ea9591d9bd055 to < 2bfbe1e0aed00ba51d58573c79452fada3f62ed4affected
  • 640a5fa50a42b99bfa2a0ec51b4ea9591d9bd055 to < 6f7d0f5fd8e440c3446560100ac4ff9a55eec340affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 6.6.55 to ≤ 6.6.*unaffected
  • 6.7.7 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References