You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
lenovo thinklmi
About this tag
The Lenovo ThinkLMI tag covers content related to the Linux kernel driver that interfaces with Lenovo's Lenovo Management Interface (LMI) for firmware attribute management on Lenovo workstations. Recent discussions focus on a security vulnerability, CVE-2024-26836, which involved an ordering bug in the think-lmi driver that could allow firmware attribute changes to bypass Admin-password checks. The fix, merged into stable kernel trees in 2024, ensures the password opcode runs first. This tag is relevant for Linux system administrators, security researchers, and IT professionals managing Lenovo hardware who need to understand driver-level security patches and firmware configuration.
The Linux kernel patch for CVE-2024-26836 corrects a subtle but important ordering bug in the platform/x86 think-lmi driver that could allow firmware attribute changes on Lenovo workstations to bypass intended Admin-password checks unless the driver runs the password opcode first — a fix that...