CVE-2025-38235

MEDIUM EPSS 2.4%
Published Jul 6, 202512mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jul 6, 2025 12mo ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting During appletb_kbd_probe, probe attempts to get the backlight device by name. When this happens backlight_device_get_by_name looks for a device in the backlight class which has name "appletb_backlight" and upon finding a match it increments the reference count for the device and returns it to the caller. However this reference is never released leading to a reference leak. Fix this by decrementing the backlight device reference count on removal via put_device and on probe failure.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 4

VendorProductVersionRange
linuxlinux_kernel*≥6.15  –  <6.15.5
linuxlinux_kernel6.16any
linuxlinux_kernel6.16any
linuxlinux_kernel6.16any

References 2

  • git.kernel.org https://git.kernel.org/stable/c/4540e41e753a7d69ecd3f5bad51fe620205c3a18
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/751d5437112a3f387de4ef6d2d1c131068ff7627
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/4540e41e753a7d69ecd3f5bad51fe620205c3a18
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/751d5437112a3f387de4ef6d2d1c131068ff7627
    Patch