AZL-70657
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-70657.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-70657
- Upstream
- Published
- 2025-11-21T11:15:49Z
- Modified
- 2026-04-01T05:21:57.934296Z
- Summary
- CVE-2025-40211 affecting package kernel for versions less than 6.6.117.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ACPI: video: Fix use-after-free in acpivideoswitch_brightness()
The switchbrightnesswork delayed work accesses device->brightness and device->backlight, freed by acpivideodevunregisterbacklight() during device removal.
If the work executes after acpivideobusunregisterbacklight() frees these resources, it causes a use-after-free when acpivideoswitch_brightness() dereferences device->brightness or device->backlight.
Fix this by calling canceldelayedworksync() for each device's switchbrightnesswork in acpivideobusremovenotifyhandler() after removing the notify handler that queues the work. This ensures the work completes before the memory is freed.
[ rjw: Changelog edit ]
- References