CVE-2025-23144
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-23144
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-23144.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-23144
- Downstream
- Related
- Published
- 2025-05-01T12:55:33.985Z
- Modified
- 2025-11-28T02:33:59.082330Z
- Summary
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
backlight: ledbl: Hold ledaccess lock when calling ledsysfsdisable()
Lockdep detects the following issue on led-backlight removal: [ 142.315935] ------------[ cut here ]------------ [ 142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 ledsysfsenable+0x54/0x80 ... [ 142.500725] Call trace: [ 142.503176] ledsysfsenable+0x54/0x80 (P) [ 142.507370] ledblremove+0x80/0xa8 [ledbl] [ 142.511742] platformremove+0x30/0x58 [ 142.515501] device_remove+0x54/0x90 ...
Indeed, ledsysfsenable() has to be called with the led_access lock held.
Hold the lock when calling ledsysfsdisable().
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23144.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/11d128f7eacec276c75cf4712880a6307ca9c885
- https://git.kernel.org/stable/c/1c82f5a393d8b9a5c1ea032413719862098afd4b
- https://git.kernel.org/stable/c/276822a00db3c1061382b41e72cafc09d6a0ec30
- https://git.kernel.org/stable/c/61a5c565fd2442d3128f3bab5f022658adc3a4e6
- https://git.kernel.org/stable/c/74c7d67a3c305fc1fa03c32a838e8446fb7aee14
- https://git.kernel.org/stable/c/87d947a0607be384bfe7bb0935884a711e35ca07
- https://git.kernel.org/stable/c/b447885ec9130cf86f355e011dc6b94d6ccfb5b7
- https://git.kernel.org/stable/c/b8ddf5107f53789448900f04fa220f34cd2f777e
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23144.json
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-23144
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedae232e45acf9621f2c96b41ca3af006ac7552c33Fixed87d947a0607be384bfe7bb0935884a711e35ca07Fixed74c7d67a3c305fc1fa03c32a838e8446fb7aee14Fixedb447885ec9130cf86f355e011dc6b94d6ccfb5b7Fixed1c82f5a393d8b9a5c1ea032413719862098afd4bFixed61a5c565fd2442d3128f3bab5f022658adc3a4e6Fixed11d128f7eacec276c75cf4712880a6307ca9c885Fixedb8ddf5107f53789448900f04fa220f34cd2f777eFixed276822a00db3c1061382b41e72cafc09d6a0ec30
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced5.6.0Fixed5.10.237
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.181
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.136
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.88
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.24
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.13.12
- Type
- ECOSYSTEM
- Events
-
Introduced6.14.0Fixed6.14.3