Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbd_backlight even when it was not successfully registered with the LED subsystem. The same happens inside acpi_remove(), where the LED devices are unregistered unconditionally. Fix this by tracking the availability of the kbd_backlight LED device and use devm_led_classdev_register() to let devres take care of unregistering the LED devices during removal. For this the parent device of the LED devices is changed to the native platform device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ae26278829a80ad0e60ff004de71e9276cee5dc0 to < fc45f6e4b86c2fa1cf742c23a373d777d066aa25affectedae26278829a80ad0e60ff004de71e9276cee5dc0 to < 4fbfe3714f645b6c64c9ba8faa83b27e4c9f2eddaffectedae26278829a80ad0e60ff004de71e9276cee5dc0 to < 9a85e2d35e54248aca39bad4f4152ed34de1995faffectedae26278829a80ad0e60ff004de71e9276cee5dc0 to < acc190322250562d5f28860f4ae1ebaf3e304fc2affectedae26278829a80ad0e60ff004de71e9276cee5dc0 to < 3e91964aa74ab261aa15d9d96318eded2fd9d22aaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.6.160 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/fc45f6e4b86c2fa1cf742c23a373d777d066aa25 ↗
- https://git.kernel.org/stable/c/4fbfe3714f645b6c64c9ba8faa83b27e4c9f2edd ↗
- https://git.kernel.org/stable/c/9a85e2d35e54248aca39bad4f4152ed34de1995f ↗
- https://git.kernel.org/stable/c/acc190322250562d5f28860f4ae1ebaf3e304fc2 ↗
- https://git.kernel.org/stable/c/3e91964aa74ab261aa15d9d96318eded2fd9d22a ↗