CVE-2025-38235

Description

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting During appletb_kbd_probe, probe attempts to get the backlight device by name. When this happens backlight_device_get_by_name looks for a device in the backlight class which has name "appletb_backlight" and upon finding a match it increments the reference count for the device and returns it to the caller. However this reference is never released leading to a reference leak. Fix this by decrementing the backlight device reference count on removal via put_device and on probe failure.

Reserved 2025-04-16 | Published 2025-07-06 | Updated 2025-07-06 | Assigner Linux

Product status

Default status
unaffected

93a0fc48948107e0cc34e1de22c3cb363a8f2783 before 751d5437112a3f387de4ef6d2d1c131068ff7627
affected

93a0fc48948107e0cc34e1de22c3cb363a8f2783 before 4540e41e753a7d69ecd3f5bad51fe620205c3a18
affected

Default status
affected

6.15
affected

Any version before 6.15
unaffected

6.15.5
unaffected

6.16-rc4
unaffected

References

git.kernel.org/...c/751d5437112a3f387de4ef6d2d1c131068ff7627

git.kernel.org/...c/4540e41e753a7d69ecd3f5bad51fe620205c3a18

cve.org (CVE-2025-38235)

nvd.nist.gov (CVE-2025-38235)

Download JSON