CVE-2025-40211
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpi_video_switch_brightness() The switch_brightness_work delayed work accesses device->brightness and device->backlight, freed by acpi_video_dev_unregister_backlight() during device removal. If the work executes after acpi_video_bus_unregister_backlight() frees these resources, it causes a use-after-free when acpi_video_switch_brightness() dereferences device->brightness or device->backlight. Fix this by calling cancel_delayed_work_sync() for each device's switch_brightness_work in acpi_video_bus_remove_notify_handler() after removing the notify handler that queues the work. This ensures the work completes before the memory is freed. [ rjw: Changelog edit ]
How to fix
- Linux Linux3f803ccf5a0c043e7c8b83f6665b082401fc8bee, ba1704316492a0496c69334338ea1fdbf4c2fd34, bc78a4f51d548c1ccc3d1967c2b394bf687c86e9, a63a5b6fb508d78fe57ae3b159d9ef3af7ba80e9, 4e85246ec0d019dfba86ba54d841ef6694f97149, de5fc93275a4a459fe2f7cb746984f2ab3e8292a, 293125536ef5521328815fa7c76d5f9eb1635659, 8f067aa59430266386b83c18b983ca583faa6a11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 ≤ v < 3f803ccf5a0c043e7c8b83f6665b082401fc8bee, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 ≤ v < ba1704316492a0496c69334338ea1fdbf4c2fd34, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 ≤ v < bc78a4f51d548c1ccc3d1967c2b394bf687c86e9, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 ≤ v < a63a5b6fb508d78fe57ae3b159d9ef3af7ba80e9, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 ≤ v < 4e85246ec0d019dfba86ba54d841ef6694f97149, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 ≤ v < de5fc93275a4a459fe2f7cb746984f2ab3e8292a, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 ≤ v < 293125536ef5521328815fa7c76d5f9eb1635659, 8ab58e8e7e097bae5fe39cbc67eb93a91f7134b7 ≤ v < 8f067aa59430266386b83c18b983ca583faa6a11, 3.17 | 3f803ccf5a0c043e7c8b83f6665b082401fc8bee, ba1704316492a0496c69334338ea1fdbf4c2fd34, bc78a4f51d548c1ccc3d1967c2b394bf687c86e9, a63a5b6fb508d78fe57ae3b159d9ef3af7ba80e9, 4e85246ec0d019dfba86ba54d841ef6694f97149, de5fc93275a4a459fe2f7cb746984f2ab3e8292a, 293125536ef5521328815fa7c76d5f9eb1635659, 8f067aa59430266386b83c18b983ca583faa6a11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.