CVE-2026-93128

CVE-2026-93128

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: lg-laptop: Fix LED resource handling

The event notification callback might access kbd_backlight even

when it was not successfully registered with the LED subsystem.

The same happens inside acpi_remove(), where the LED devices are

unregistered unconditionally.

Fix this by tracking the availability of the kbd_backlight LED

device and use devm_led_classdev_register() to let devres take

care of unregistering the LED devices during removal. For this

the parent device of the LED devices is changed to the native

platform device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Published
2026-09-17T21:18Z
References (5)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:11Z
    platform/x86: lg-laptop: Fix LED resource handling
    cvelistv5