In the Linux kernel, the following vulnerability has been resolved:
backlight: ledbl: Hold ledaccess lock when calling ledsysfsdisable()
Lockdep detects the following issue on led-backlight removal: [ 142.315935] ------------[ cut here ]------------ [ 142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 ledsysfsenable+0x54/0x80 ... [ 142.500725] Call trace: [ 142.503176] ledsysfsenable+0x54/0x80 (P) [ 142.507370] ledblremove+0x80/0xa8 [ledbl] [ 142.511742] platformremove+0x30/0x58 [ 142.515501] device_remove+0x54/0x90 ...
Indeed, ledsysfsenable() has to be called with the led_access lock held.
Hold the lock when calling ledsysfsdisable().
[
{
"id": "CVE-2025-23144-189ed0f9",
"target": {
"file": "drivers/video/backlight/led_bl.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"69322349816639543069606151794663251694",
"88877586704723755246396294706077633045",
"173522015444157482365903020779564293070",
"60705031814614364096850848244850850883",
"198632570271081055595076584191483488703"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b447885ec9130cf86f355e011dc6b94d6ccfb5b7",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-2330bf01",
"target": {
"file": "drivers/video/backlight/led_bl.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"69322349816639543069606151794663251694",
"88877586704723755246396294706077633045",
"173522015444157482365903020779564293070",
"60705031814614364096850848244850850883",
"198632570271081055595076584191483488703"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c82f5a393d8b9a5c1ea032413719862098afd4b",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-36198d23",
"target": {
"file": "drivers/video/backlight/led_bl.c",
"function": "led_bl_remove"
},
"digest": {
"function_hash": "164525176981558888472410257678353747878",
"length": 241.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61a5c565fd2442d3128f3bab5f022658adc3a4e6",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-3834e4b3",
"target": {
"file": "drivers/video/backlight/led_bl.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"69322349816639543069606151794663251694",
"88877586704723755246396294706077633045",
"173522015444157482365903020779564293070",
"60705031814614364096850848244850850883",
"198632570271081055595076584191483488703"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61a5c565fd2442d3128f3bab5f022658adc3a4e6",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-3ed883ce",
"target": {
"file": "drivers/video/backlight/led_bl.c",
"function": "led_bl_remove"
},
"digest": {
"function_hash": "164525176981558888472410257678353747878",
"length": 241.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c82f5a393d8b9a5c1ea032413719862098afd4b",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-945750f0",
"target": {
"file": "drivers/video/backlight/led_bl.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"69322349816639543069606151794663251694",
"88877586704723755246396294706077633045",
"173522015444157482365903020779564293070",
"60705031814614364096850848244850850883",
"198632570271081055595076584191483488703"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74c7d67a3c305fc1fa03c32a838e8446fb7aee14",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-9a3df41c",
"target": {
"file": "drivers/video/backlight/led_bl.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"69322349816639543069606151794663251694",
"88877586704723755246396294706077633045",
"55783774254676485833130111460880614949",
"29717233112299601304060884369119774962",
"169063641114832100047850013739635404886"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87d947a0607be384bfe7bb0935884a711e35ca07",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-ac8f3bd2",
"target": {
"file": "drivers/video/backlight/led_bl.c",
"function": "led_bl_remove"
},
"digest": {
"function_hash": "105180189598870094369053168489597439783",
"length": 252.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87d947a0607be384bfe7bb0935884a711e35ca07",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-b069708e",
"target": {
"file": "drivers/video/backlight/led_bl.c",
"function": "led_bl_remove"
},
"digest": {
"function_hash": "164525176981558888472410257678353747878",
"length": 241.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74c7d67a3c305fc1fa03c32a838e8446fb7aee14",
"signature_version": "v1"
},
{
"id": "CVE-2025-23144-b5c59a54",
"target": {
"file": "drivers/video/backlight/led_bl.c",
"function": "led_bl_remove"
},
"digest": {
"function_hash": "164525176981558888472410257678353747878",
"length": 241.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b447885ec9130cf86f355e011dc6b94d6ccfb5b7",
"signature_version": "v1"
}
]