CVE-2026-93128

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-09-17 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lg-laptop: Fix LED resource handling The event notification callback might access kbd_backlight even when it was not successfully registered with the LED subsystem. The same happens inside acpi_remove(), where the LED devices are unregistered unconditionally. Fix this by tracking the availability of the kbd_backlight LED device and use devm_led_classdev_register() to let devres take care of unregistering the LED devices during removal. For this the parent device of the LED devices is changed to the native platform device.

Affected Software (7)

VendorProductVersion
Linux Linux ae26278829a80ad0e60ff004de71e9276cee5dc0 < 4f9f1448dac4927ce5160f3a4a295e08fb969d32
Linux Linux ae26278829a80ad0e60ff004de71e9276cee5dc0 < fc45f6e4b86c2fa1cf742c23a373d777d066aa25
Linux Linux ae26278829a80ad0e60ff004de71e9276cee5dc0 < 4fbfe3714f645b6c64c9ba8faa83b27e4c9f2edd
Linux Linux ae26278829a80ad0e60ff004de71e9276cee5dc0 < 9a85e2d35e54248aca39bad4f4152ed34de1995f
Linux Linux ae26278829a80ad0e60ff004de71e9276cee5dc0 < acc190322250562d5f28860f4ae1ebaf3e304fc2
Linux Linux ae26278829a80ad0e60ff004de71e9276cee5dc0 < 3e91964aa74ab261aa15d9d96318eded2fd9d22a
Linux Linux 5.15

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.21%
Raw Score 0.002150
Percentile 11.9%
Date 2026-10-31

EPSS Trend

2026-10-31
0.00215
2026-10-30
0.00209
2026-10-29
0.00209

Intelligence Sources

mitre ref →
nvd ref →