In the Linux kernel, the following vulnerability has been resolved:
platform/x86: think-lmi: Fix password opcode ordering for workstations
The Lenovo workstations require the password opcode to be run before the attribute value is changed (if Admin password is enabled).
Tested on some Thinkpads to confirm they are OK with this order too.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-develUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-rt-vdso | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub