Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbd_backlight even when it was not successfully registered with the LED subsystem. The same happens inside acpi_remove(), where the LED devices are unregistered unconditionally. Fix this by tracking the availability of the kbd_backlight LED device and use devm_led_classdev_register() to let devres take care of unregistering the LED devices during removal. For this the parent device of the LED devices is changed to the native platform device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected ae26278829a80ad0e60ff004de71e9276cee5dc0 before fc45f6e4b86c2fa1cf742c23a373d777d066aa25; affected ae26278829a80ad0e60ff004de71e9276cee5dc0 before 4fbfe3714f645b6c64c9ba8faa83b27e4c9f2edd; affected ae26278829a80ad0e60ff004de71e9276cee5dc0 before 9a85e2d35e54248aca39bad4f4152ed34de1995f; affected ae26278829a80ad0e60ff004de71e9276cee5dc0 before acc190322250562d5f28860f4ae1ebaf3e304fc2; affected ae26278829a80ad0e60ff004de71e9276cee5dc0 before 3e91964aa74ab261aa15d9d96318eded2fd9d22a |
| Linux / Linux | affected 5.15; unaffected 0 before 5.15; unaffected 6.6.160 through 6.6.*; unaffected 6.12.110 through 6.12.*; unaffected 6.18.52 through 6.18.*; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/fc45f6e4b86c2fa1cf742c23a373d777d066aa25
- https://git.kernel.org/stable/c/4fbfe3714f645b6c64c9ba8faa83b27e4c9f2edd
- https://git.kernel.org/stable/c/9a85e2d35e54248aca39bad4f4152ed34de1995f
- https://git.kernel.org/stable/c/acc190322250562d5f28860f4ae1ebaf3e304fc2
- https://git.kernel.org/stable/c/3e91964aa74ab261aa15d9d96318eded2fd9d22a