CVE-2026-93128EPSS p8.9%
CVE-2026-93128CVE-2026-93128
Description
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: lg-laptop: Fix LED resource handling
The event notification callback might access kbd_backlight even
when it was not successfully registered with the LED subsystem.
The same happens inside acpi_remove(), where the LED devices are
unregistered unconditionally.
Fix this by tracking the availability of the kbd_backlight LED
device and use devm_led_classdev_register() to let devres take
care of unregistering the LED devices during removal. For this
the parent device of the LED devices is changed to the native
platform device.
Scoring
| EPSS | 0.20% probability of exploitation · percentile 8.9% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-17 |