CVE-2025-23144

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

MEDIUM

5.5

CVSS Score

Published: May 1, 2025 at 12:55 PM UTC

Updated: June 17, 2026 at 08:52 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() Lockdep detects the following issue on led-backlight removal: [ 142.315935] ------------[ cut here ]------------ [ 142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 led_sysfs_enable+0x54/0x80 ... [ 142.500725] Call trace: [ 142.503176] led_sysfs_enable+0x54/0x80 (P) [ 142.507370] led_bl_remove+0x80/0xa8 [led_bl] [ 142.511742] platform_remove+0x30/0x58 [ 142.515501] device_remove+0x54/0x90 ... Indeed, led_sysfs_enable() has to be called with the led_access lock held. Hold the lock when calling led_sysfs_disable().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

5.11 ≤ v < 5.15.1815.16 ≤ v < 6.1.1365.6 ≤ v < 5.10.2375.6 ≤ v < 5.15.1815.6 ≤ v < 6.1.1365.6 ≤ v < 6.12.245.6 ≤ v < 6.13.125.6 ≤ v < 6.14.35.6 ≤ v < 6.155.6 ≤ v < 6.6.885.6.1 ≤ v < 5.10.2376.13 ≤ v < 6.13.126.14 ≤ v < 6.14.36.2 ≤ v < 6.6.886.7 ≤ v < 6.12.245.6 5.6 rc5 5.6 rc6 5.6 rc7ae232e45acf9621f2c96b41ca3af006ac7552c33

Vendor states this is fixed in 11d128f7eacec276c75cf4712880a6307ca9c885 (fixed)

Vendor states this is fixed in 1c82f5a393d8b9a5c1ea032413719862098afd4b (fixed)

Vendor states this is fixed in 276822a00db3c1061382b41e72cafc09d6a0ec30 (fixed)

Vendor states this is fixed in 61a5c565fd2442d3128f3bab5f022658adc3a4e6 (fixed)

Vendor states this is fixed in 74c7d67a3c305fc1fa03c32a838e8446fb7aee14 (fixed)

Vendor states this is fixed in 87d947a0607be384bfe7bb0935884a711e35ca07 (fixed)

Vendor states this is fixed in b447885ec9130cf86f355e011dc6b94d6ccfb5b7 (fixed)

Vendor states this is fixed in b8ddf5107f53789448900f04fa220f34cd2f777e (fixed)

Vendor states this is fixed in 5.10.237 (unaffected)

Vendor states this is fixed in 5.15.181 (unaffected)

Vendor states this is fixed in 5.6 (unaffected)

Vendor states this is fixed in 6.1.136 (unaffected)