CVE-2025-23144

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 11, 2026
Reserved: Jan 11, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

Lockdep detects the following issue on led-backlight removal: [ 142.315935] ------------[ cut here ]------------ [ 142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 led_sysfs_enable+0x54/0x80 ... [ 142.500725] Call trace: [ 142.503176] led_sysfs_enable+0x54/0x80 (P) [ 142.507370] led_bl_remove+0x80/0xa8 [led_bl] [ 142.511742] platform_remove+0x30/0x58 [ 142.515501] device_remove+0x54/0x90 ...

Indeed, led_sysfs_enable() has to be called with the led_access lock held.

Hold the lock when calling led_sysfs_disable().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 87d947a0607be384bfe7bb0935884a711e35ca07Affected ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 74c7d67a3c305fc1fa03c32a838e8446fb7aee14Affected ae232e45acf9621f2c96b41ca3af006ac7552c33 to before b447885ec9130cf86f355e011dc6b94d6ccfb5b7Affected ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 1c82f5a393d8b9a5c1ea032413719862098afd4bAffected ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 61a5c565fd2442d3128f3bab5f022658adc3a4e6Affected ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 11d128f7eacec276c75cf4712880a6307ca9c885Affected ae232e45acf9621f2c96b41ca3af006ac7552c33 to before b8ddf5107f53789448900f04fa220f34cd2f777eAffected ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 276822a00db3c1061382b41e72cafc09d6a0ec30Affected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.136 through 6.1.Not affected 6.6.88 through 6.6.Not affected 6.12.24 through 6.12.Not affected 6.13.12 through 6.13.Not affected 6.14.3 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 87d947a0607be384bfe7bb0935884a711e35ca07Affected
ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 74c7d67a3c305fc1fa03c32a838e8446fb7aee14Affected
ae232e45acf9621f2c96b41ca3af006ac7552c33 to before b447885ec9130cf86f355e011dc6b94d6ccfb5b7Affected
ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 1c82f5a393d8b9a5c1ea032413719862098afd4bAffected
ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 61a5c565fd2442d3128f3bab5f022658adc3a4e6Affected
ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 11d128f7eacec276c75cf4712880a6307ca9c885Affected
ae232e45acf9621f2c96b41ca3af006ac7552c33 to before b8ddf5107f53789448900f04fa220f34cd2f777eAffected
ae232e45acf9621f2c96b41ca3af006ac7552c33 to before 276822a00db3c1061382b41e72cafc09d6a0ec30Affected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.136 through 6.1.*Not affected
6.6.88 through 6.6.*Not affected
6.12.24 through 6.12.*Not affected
6.13.12 through 6.13.*Not affected
6.14.3 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.