https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:06:21 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40211 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ACPI: video: Fix use-after-free in acpi_video_switch_brightness()</p> <p>The switch_brightness_work delayed work accesses device-&gt;brightness and device-&gt;backlight, freed by acpi_video_dev_unregister_backlight() during device removal.</p> <p>If the work executes after acpi_video_bus_unregister_backlight() frees these resources, it causes a use-after-free when acpi_video_switch_brightness() dereferences device-&gt;brightness or device-&gt;backlight.</p> <p>Fix this by calling cancel_delayed_work_sync() for each device&#39;s switch_brightness_work in acpi_video_bus_remove_notify_handler() after removing the notify handler that queues the work. This ensures the work completes before the memory is freed.</p> <p>[ rjw: Changelog edit ]</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ACPI: video: Fix use-after-free in acpi_video_switch_brightness()</p> <p>The switch_brightness_work delayed work accesses device-&gt;brightness and device-&gt;backlight, freed by acpi_video_dev_unregister_backlight() during device removal.</p> <p>If the work executes after acpi_video_bus_unregister_backlight() frees these resources, it causes a use-after-free when acpi_video_switch_brightness() dereferences device-&gt;brightness or device-&gt;backlight.</p> <p>Fix this by calling cancel_delayed_work_sync() for each device&#39;s switch_brightness_work in acpi_video_bus_remove_notify_handler() after removing the notify handler that queues the work. This ensures the work completes before the memory is freed.</p> <p>[ rjw: Changelog edit ]</p> https://vulnerability.circl.lu/vuln/cve-2025-40211