CVEvulnerability
CVE-2026-93128
- Status
- Received
- Published
- 2026-09-17
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: lg-laptop: Fix LED resource handling
The event notification callback might access kbd_backlight even
when it was not successfully registered with the LED subsystem.
The same happens inside acpi_remove(), where the LED devices are
unregistered unconditionally.
Fix this by tracking the availability of the kbd_backlight LED
device and use devm_led_classdev_register() to let devres take
care of unregistering the LED devices during removal. For this
the parent device of the LED devices is changed to the native
platform device.
References
- https://git.kernel.org/stable/c/3e91964aa74ab261aa15d9d96318eded2fd9d22a git.kernel.org
- https://git.kernel.org/stable/c/4fbfe3714f645b6c64c9ba8faa83b27e4c9f2edd git.kernel.org
- https://git.kernel.org/stable/c/9a85e2d35e54248aca39bad4f4152ed34de1995f git.kernel.org
- https://git.kernel.org/stable/c/acc190322250562d5f28860f4ae1ebaf3e304fc2 git.kernel.org
- https://git.kernel.org/stable/c/fc45f6e4b86c2fa1cf742c23a373d777d066aa25 git.kernel.org