CVE-2025-68758 — Expired Pointer Dereference in Linux
Severity
7.8HIGHOSV
OSV7.2
No vectorEPSS
0.1%
top 83.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 5
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
backlight: led-bl: Add devlink to supplier LEDs
LED Backlight is a consumer of one or multiple LED class devices, but
devlink is currently unable to create correct supplier-producer links when
the supplier is a class device. It creates instead a link where the
supplier is the parent of the expected device.
One consequence is that removal order is not correctly enforced.
Issues happen for example with the following sections i…
Affected Packages13 packages
▶CVEListV5linux/linuxae232e45acf9621f2c96b41ca3af006ac7552c33 — 64739adf3eef063b8e2c72b7e919eac8c6480bf0+8