CVE-2026-81018: linux
Vulnerability summary
CVE-2026-81018 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 11-09-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the system authentication object to store ->signature and ->save_signature, which leak when the driver is removed. Free the signatures to avoid leaking memory.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
+0.03 pp
From 0.13% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu120 products
- linuxAll versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 7.2.6-1
Linux1 product
- linux≥ 5dcb5ef125907d09806509a9db8c6705041e0026, < 9c28adde051fe76a7754856d0a414ab89adcaa4d | ≥ 5dcb5ef125907d09806509a9db8c6705041e0026, < abbcc0354108cf47a6055b951182bf73520d0363 | ≥ 5dcb5ef125907d09806509a9db8c6705041e0026, < abca989604f60fe29d7170431f819e28ec7d868a | 6.13
3 vendors · 122 products