CVE-2024-26836

2024-04-1717:30:02

redhat.com

access.redhat.com

linux

kernel

vulnerability

cve-2024-26836

resolved

platform

x86

think-lmi

password

opcode

ordering

workstations

lenovo

thinkpads

attribute value

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix password opcode ordering for workstations The Lenovo workstations require the password opcode to be run before the attribute value is changed (if Admin password is enabled). Tested on some Thinkpads to confirm they are OK with this order too.