The think‑lmi driver in the Linux kernel does not free system certificate signatures when it is removed, causing a memory leak that can expose sensitive authentication data; this flaw is a classic Memory Leak (CWE‑772) that may permit a local attacker to read or reuse signature information from the kernel’s memory space, potentially compromising confidentiality.

Any Linux kernel build that includes the think‑lmi driver and has not incorporated the patch that frees the signatures; no specific kernel release or version is listed, so the risk applies to all affected builds prior to the fix.

The CVSS score of 3.3 indicates low severity, and the EPSS score of less than 1% indicates a low likelihood of exploitation; the vulnerability is not cataloged in the CISA KEV list. Based on the description, it is inferred that the attack requires the driver to be unloaded or removed, which normally needs local privileged access, implying that the likely attack vector is local. If an attacker can force the driver to unload, the leaked signatures may be extracted from memory and used for further attacks.