Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-26836

HistoryApr 17, 2024 - 10:15 a.m.

CVE-2024-26836

2024-04-1710:15:09

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-26836

think-lmi

unix

security fix

platform/x86

password ordering

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix password opcode ordering for workstations The Lenovo workstations require the password opcode to be run before the attribute value is changed (if Admin password is enabled). Tested on some Thinkpads to confirm they are OK with this order too.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux<= 6.1.106-3linux_6.1.106-3_all.deb
Debian11alllinux< 5.10.223-1linux_5.10.223-1_all.deb
Debian999alllinux< 6.7.7-1linux_6.7.7-1_all.deb
Debian13alllinux< 6.7.7-1linux_6.7.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	<= 6.1.106-3	linux_6.1.106-3_all.deb
Debian	11	all	linux	< 5.10.223-1	linux_5.10.223-1_all.deb
Debian	999	all	linux	< 6.7.7-1	linux_6.7.7-1_all.deb
Debian	13	all	linux	< 6.7.7-1	linux_6.7.7-1_all.deb