PT-2025-18398 · Linux+6 · Linux Kernel+6
Published
2025-02-11
·
Updated
2026-04-20
·
CVE-2025-23144
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability has been resolved in the Linux kernel related to the backlight LED driver. The issue occurs when the led sysfs enable function is called without holding the led access lock, which can lead to a warning and a call trace. The lockdep detects this problem when removing the LED backlight. To fix this, the led access lock must be held when calling led sysfs disable.
Recommendations
As a temporary workaround, consider disabling the
led sysfs enable() function until a patch is available.
Restrict access to the led bl module to minimize the risk of exploitation.
Avoid using the led sysfs disable() function in the affected kernel version until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu