CVE-2025-23144: debian debian_linux
Vulnerability summary
CVE-2025-23144 is a medium (CVSS 5.5) vulnerability in debian debian_linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.2% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 42 · Related 40Timeline
- 01-05-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() Lockdep detects the following issue on led-backlight removal: [ 142.315935] ------------[ cut here ]------------ [ 142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 led_sysfs_enable+0x54/0x80 ... [ 142.500725] Call trace: [ 142.503176] led_sysfs_enable+0x54/0x80 (P) [ 142.507370] led_bl_remove+0x80/0xa8 [led_bl] [ 142.511742] platform_remove+0x30/0x58 [ 142.515501] device_remove+0x54/0x90 ... Indeed, led_sysfs_enable() has to be called with the led_access lock held. Hold the lock when calling led_sysfs_disable().
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
+0.01 pp
From 0.21% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu126 products
- linux< 5.15.0-144.157 | < 6.8.0-100.100
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1088.95 | < 6.8.0-1046.49
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.137-1 | < 6.12.25-1
- debian_linuxEOL11.0
Linux2 products
- linux≥ ae232e45acf9621f2c96b41ca3af006ac7552c33, < 87d947a0607be384bfe7bb0935884a711e35ca07 | ≥ ae232e45acf9621f2c96b41ca3af006ac7552c33, < 74c7d67a3c305fc1fa03c32a838e8446fb7aee14 | ≥ ae232e45acf9621f2c96b41ca3af006ac7552c33, < b447885ec9130cf86f355e011dc6b94d6ccfb5b7 | ≥ ae232e45acf9621f2c96b41ca3af006ac7552c33, < 1c82f5a393d8b9a5c1ea032413719862098afd4b | ≥ ae232e45acf9621f2c96b41ca3af006ac7552c33, < 61a5c565fd2442d3128f3bab5f022658adc3a4e6 | ≥ ae232e45acf9621f2c96b41ca3af006ac7552c33, < 11d128f7eacec276c75cf4712880a6307ca9c885 | ≥ ae232e45acf9621f2c96b41ca3af006ac7552c33, < b8ddf5107f53789448900f04fa220f34cd2f777e | ≥ ae232e45acf9621f2c96b41ca3af006ac7552c33, < 276822a00db3c1061382b41e72cafc09d6a0ec30 | 5.6
- linux_kernel≥ 5.6.1, < 5.10.237 | ≥ 5.11, < 5.15.181 | ≥ 5.16, < 6.1.136 | ≥ 6.2, < 6.6.88 | ≥ 6.7, < 6.12.24 | ≥ 6.13, < 6.13.12 | ≥ 6.14, < 6.14.3 | 5.6 | 5.6:rc5 | 5.6:rc6 | 5.6:rc7
3 vendors · 130 products
