CVE-2025-23144

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel related to the backlight LED driver. The issue occurs when the led sysfs enable function is called without holding the led access lock, which can lead to a warning and a call trace. The lockdep detects this problem when removing the LED backlight. To fix this, the led access lock must be held when calling led sysfs disable.

Recommendations As a temporary workaround, consider disabling the led sysfs enable() function until a patch is available. Restrict access to the led bl module to minimize the risk of exploitation. Avoid using the led sysfs disable() function in the affected kernel version until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.