CVE-2026-93128

platform/x86: lg-laptop: Fix LED resource handling

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: lg-laptop: Fix LED resource handling

The event notification callback might access kbd_backlight even when it was not successfully registered with the LED subsystem. The same happens inside acpi_remove(), where the LED devices are unregistered unconditionally.

Fix this by tracking the availability of the kbd_backlight LED device and use devm_led_classdev_register() to let devres take care of unregistering the LED devices during removal. For this the parent device of the LED devices is changed to the native platform device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ae26278829a80ad0e60ff004de71e9276cee5dc0 to before 4f9f1448dac4927ce5160f3a4a295e08fb969d32Affected ae26278829a80ad0e60ff004de71e9276cee5dc0 to before fc45f6e4b86c2fa1cf742c23a373d777d066aa25Affected ae26278829a80ad0e60ff004de71e9276cee5dc0 to before 4fbfe3714f645b6c64c9ba8faa83b27e4c9f2eddAffected ae26278829a80ad0e60ff004de71e9276cee5dc0 to before 9a85e2d35e54248aca39bad4f4152ed34de1995fAffected ae26278829a80ad0e60ff004de71e9276cee5dc0 to before acc190322250562d5f28860f4ae1ebaf3e304fc2Affected ae26278829a80ad0e60ff004de71e9276cee5dc0 to before 3e91964aa74ab261aa15d9d96318eded2fd9d22aAffected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

ae26278829a80ad0e60ff004de71e9276cee5dc0 to before 4f9f1448dac4927ce5160f3a4a295e08fb969d32Affected
ae26278829a80ad0e60ff004de71e9276cee5dc0 to before fc45f6e4b86c2fa1cf742c23a373d777d066aa25Affected
ae26278829a80ad0e60ff004de71e9276cee5dc0 to before 4fbfe3714f645b6c64c9ba8faa83b27e4c9f2eddAffected
ae26278829a80ad0e60ff004de71e9276cee5dc0 to before 9a85e2d35e54248aca39bad4f4152ed34de1995fAffected
ae26278829a80ad0e60ff004de71e9276cee5dc0 to before acc190322250562d5f28860f4ae1ebaf3e304fc2Affected
ae26278829a80ad0e60ff004de71e9276cee5dc0 to before 3e91964aa74ab261aa15d9d96318eded2fd9d22aAffected

LinuxLinux

5.15Affected
before 5.15Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.