CVE-2026-72241

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overread can occur in the uleds component of the leds subsystem. This happens because the name string provided by userspace is not guaranteed to be null-terminated. When the strchr() function is used on this string, or when the string is processed by the LED class device, it may read beyond the intended buffer boundary. A buffer overread is a condition where a program reads data past the end of the intended buffer, potentially exposing sensitive information or causing a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.