Bug 2536698 (CVE-2026-93128) - CVE-2026-93128 kernel: platform/x86: lg-laptop: Fix LED resource handling
Summary: CVE-2026-93128 kernel: platform/x86: lg-laptop: Fix LED resource handling
Keywords:
Status: NEW
Alias: CVE-2026-93128
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-17 19:08 UTC by OSIDB Bzimport
Modified: 2026-10-20 11:40 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-17 19:08:34 UTC
In the Linux kernel, the following vulnerability has been resolved:

platform/x86: lg-laptop: Fix LED resource handling

The event notification callback might access kbd_backlight even
when it was not successfully registered with the LED subsystem.
The same happens inside acpi_remove(), where the LED devices are
unregistered unconditionally.

Fix this by tracking the availability of the kbd_backlight LED
device and use devm_led_classdev_register() to let devres take
care of unregistering the LED devices during removal. For this
the parent device of the LED devices is changed to the native
platform device.


Note You need to log in before you can comment on or make changes to this bug.