---
id: CVE-2025-23144
title: 'backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

  Lockdep detects the following issue on led-backlight removal:
    [  142.315935] ------------[ c…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 <
    87d947a0607be384bfe7bb0935884a711e35ca07
  - >-
    Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 <
    74c7d67a3c305fc1fa03c32a838e8446fb7aee14
  - >-
    Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 <
    b447885ec9130cf86f355e011dc6b94d6ccfb5b7
  - >-
    Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 <
    1c82f5a393d8b9a5c1ea032413719862098afd4b
  - >-
    Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 <
    61a5c565fd2442d3128f3bab5f022658adc3a4e6
  - >-
    Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 <
    11d128f7eacec276c75cf4712880a6307ca9c885
  - >-
    Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 <
    b8ddf5107f53789448900f04fa220f34cd2f777e
  - >-
    Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 <
    276822a00db3c1061382b41e72cafc09d6a0ec30
  - Linux 5.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:39:30.966512Z'
published: '2025-05-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:51.914Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-23144'
references:
  - url: 'https://git.kernel.org/stable/c/87d947a0607be384bfe7bb0935884a711e35ca07'
  - url: 'https://git.kernel.org/stable/c/74c7d67a3c305fc1fa03c32a838e8446fb7aee14'
  - url: 'https://git.kernel.org/stable/c/b447885ec9130cf86f355e011dc6b94d6ccfb5b7'
  - url: 'https://git.kernel.org/stable/c/1c82f5a393d8b9a5c1ea032413719862098afd4b'
  - url: 'https://git.kernel.org/stable/c/61a5c565fd2442d3128f3bab5f022658adc3a4e6'
  - url: 'https://git.kernel.org/stable/c/11d128f7eacec276c75cf4712880a6307ca9c885'
  - url: 'https://git.kernel.org/stable/c/b8ddf5107f53789448900f04fa220f34cd2f777e'
  - url: 'https://git.kernel.org/stable/c/276822a00db3c1061382b41e72cafc09d6a0ec30'
tags:
  - cve.org
epss: 0.00223
epssPercentile: 0.12938
ingestedAt: '2026-11-05T22:38:31.866Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()

Lockdep detects the following issue on led-backlight removal:
  [  142.315935] ------------[ cut here ]------------
  [  142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 led_sysfs_enable+0x54/0x80
  ...
  [  142.500725] Call trace:
  [  142.503176]  led_sysfs_enable+0x54/0x80 (P)
  [  142.507370]  led_bl_remove+0x80/0xa8 [led_bl]
  [  142.511742]  platform_remove+0x30/0x58
  [  142.515501]  device_remove+0x54/0x90
  ...

Indeed, led_sysfs_enable() has to be called with the led_access
lock held.

Hold the lock when calling led_sysfs_disable().

## Affected

- `Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 < 87d947a0607be384bfe7bb0935884a711e35ca07`
- `Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 < 74c7d67a3c305fc1fa03c32a838e8446fb7aee14`
- `Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 < b447885ec9130cf86f355e011dc6b94d6ccfb5b7`
- `Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 < 1c82f5a393d8b9a5c1ea032413719862098afd4b`
- `Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 < 61a5c565fd2442d3128f3bab5f022658adc3a4e6`
- `Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 < 11d128f7eacec276c75cf4712880a6307ca9c885`
- `Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 < b8ddf5107f53789448900f04fa220f34cd2f777e`
- `Linux >= ae232e45acf9621f2c96b41ca3af006ac7552c33 < 276822a00db3c1061382b41e72cafc09d6a0ec30`
- `Linux 5.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.