CVE-2026-93128platform/x86: lg-laptop: Fix LED resource handling
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbd_backlight even when it was not successfully registered with the LED subsystem. The same happens inside acpi_remove(), where the LED devices are unregistered unconditionally. Fix this by tracking the availability of the kbd_backlight LED device and use devm_led_classdev_register() to let devres take care of unregistering the LED devices during removal. For this the parent device of the LED devices is changed to the native platform device.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ae26278829a80ad0e60ff004de71e9276cee5dc0 before 4fbfe3714f645b6c64c9ba8faa83b27e4c9f2edd; from ae26278829a80ad0e60ff004de71e9276cee5dc0 before 9a85e2d35e54248aca39bad4f4152ed34de1995f; from ae26278829a80ad0e60ff004de71e9276cee5dc0 before acc190322250562d5f28860f4ae1ebaf3e304fc2; from ae26278829a80ad0e60ff004de71e9276cee5dc0 before 3e91964aa74ab261aa15d9d96318eded2fd9d22a | CNA record |
References
- https://git.kernel.org/stable/c/4fbfe3714f645b6c64c9ba8faa83b27e4c9f2edd
- https://git.kernel.org/stable/c/9a85e2d35e54248aca39bad4f4152ed34de1995f
- https://git.kernel.org/stable/c/acc190322250562d5f28860f4ae1ebaf3e304fc2
- https://git.kernel.org/stable/c/3e91964aa74ab261aa15d9d96318eded2fd9d22a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.