CVE-2023-54252: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54252 is a memory leak vulnerability in the Linux kernel's platform/x86: think-lmi driver, specifically in the code responsible for parsing ThinkStation WMI strings. The flaw was introduced by a prior commit that failed to free memory allocated from tlmi_setting, resulting in a resource leak. Affected kernel versions span multiple stable branches, including Linux 5.15.x before 5.15.107, 6.1.x before 6.1.24, and 6.2.x before 6.2.11, as well as specific commit ranges in the mainline tree (Feedly). The vulnerability was published on December 30, 2025, and carries an EPSS score of 0.0002 (very low probability of exploitation) (Feedly). No CVSS base score has been assigned at this time.

The root cause is a missing memory deallocation (CWE-401: Missing Release of Memory after Effective Lifetime) in the think-lmi platform driver within the Linux kernel's x86 subsystem. When parsing WMI strings from ThinkStation firmware interfaces, a buffer allocated via tlmi_setting was not freed upon completion of the parsing routine, leading to a kernel memory leak. The fix also renames the affected variable to reduce confusion with a similarly named variable in the same function scope. Patches are available as stable commits across multiple kernel branches (Feedly).

The primary impact of this vulnerability is a kernel memory leak, which over time can degrade system availability by exhausting kernel memory resources on affected ThinkStation systems. There is no known path to privilege escalation, arbitrary code execution, or data exfiltration directly from this flaw. The confidentiality and integrity of the system are not directly affected; the risk is limited to availability degradation on systems running the vulnerable think-lmi kernel driver (Feedly).

Apply the upstream Linux kernel patches that address this memory leak. Fixed versions include Linux 5.15.107, 6.1.24, and 6.2.11, as well as the corresponding mainline stable commits (43fc0342bac1, cccdb30935c8, 081da7b1c881, e7d796fccdc8) (Feedly). Users running affected ThinkStation systems should update to a patched kernel version through their distribution's standard update mechanism. No configuration-based workaround is known; upgrading the kernel is the recommended remediation.