CVE-2025-23144: linux kernel +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2025-23144

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() Lockdep detects the following issue on led-backlight removal: [ 142.315935] ------------[ cut here ]------------ [ 142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 led_sysfs_enable+0x54/0x80 ... [ 142.500725] Call trace: [ 142.503176] led_sysfs_enable+0x54/0x80 (P) [ 142.507370] led_bl_remove+0x80/0xa8 [led_bl] [ 142.511742] platform_remove+0x30/0x58 [ 142.515501] device_remove+0x54/0x90 ... Indeed, led_sysfs_enable() has to be called with the led_access lock held. Hold the lock when calling led_sysfs_disable().

Rincian

Terbit di NVD: 1 Mei 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
EPSS (30 hari): 0,22% peluang dieksploitasi; lebih tinggi dari 12,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Versi 5.6.1 hingga sebelum 5.10.237
linux	linux kernel	Versi 5.11 hingga sebelum 5.15.181
linux	linux kernel	Versi 5.16 hingga sebelum 6.1.136
linux	linux kernel	Versi 6.2 hingga sebelum 6.6.88
linux	linux kernel	Versi 6.7 hingga sebelum 6.12.24
linux	linux kernel	Versi 6.13 hingga sebelum 6.13.12
linux	linux kernel	Versi 6.14 hingga sebelum 6.14.3
linux	linux kernel	Versi 5.6
linux	linux kernel	Versi 5.6 rc5
linux	linux kernel	Versi 5.6 rc6
linux	linux kernel	Versi 5.6 rc7
debian	debian linux	Versi 11.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/stable/c/11d128f7eacec276c75cf4712880a6307ca9c885 patch
https://git.kernel.org/stable/c/1c82f5a393d8b9a5c1ea032413719862098afd4b patch
https://git.kernel.org/stable/c/276822a00db3c1061382b41e72cafc09d6a0ec30 patch
https://git.kernel.org/stable/c/61a5c565fd2442d3128f3bab5f022658adc3a4e6 patch
https://git.kernel.org/stable/c/74c7d67a3c305fc1fa03c32a838e8446fb7aee14 patch
https://git.kernel.org/stable/c/87d947a0607be384bfe7bb0935884a711e35ca07 patch
https://git.kernel.org/stable/c/b447885ec9130cf86f355e011dc6b94d6ccfb5b7 patch
https://git.kernel.org/stable/c/b8ddf5107f53789448900f04fa220f34cd2f777e patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.