# CVE-2025-68758: backlight: led-bl: Add devlink to supplier LEDs CVE-2025-68758 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2025-68758, released January 5, 2026. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-68758 - Priority: Routine - CVSS: 5.5 (Moderate) - EPSS: 0.0020 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jan 5, 2026 - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68758 ## Description In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of one or multiple LED class devices, but devlink is currently unable to create correct supplier-producer links when the supplier is a class device. It creates instead a link where the supplier is the parent of the expected device. One consequence is that removal order is not correctly enforced. Issues happen for example with the following sections in a device tree overlay: // An LED driver chip pca9632@62 { compatible = "nxp,pca9632"; reg = <0x62>; // ... addon_led_pwm: led-pwm@3 { reg = <3>; label = "addon:led:pwm"; }; }; backlight-addon { compatible = "led-backlight"; leds = <&addon_led_pwm>; brightness-levels = <255>; default-brightness-level = <255>; }; In this example, the devlink should be created between the backlight-addon (consumer) and the pca9632@62 (supplier). Instead it is created between the backlight-addon (consumer) and the parent of the pca9632@62, which is typically the I2C bus adapter. On removal of the above overlay, the LED driver can be removed before the backlight device, resulting in: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 ... Call trace: led_put+0xe0/0x140 devm_led_release+0x6c/0x98 Another way to reproduce the bug without any device tree overlays is unbinding the LED class device (pca9632@62) before unbinding the consumer (backlight-addon): echo 11-0062 >/sys/bus/i2c/drivers/leds-pca963x/unbind echo ...backlight-dock >/sys/bus/platform/drivers/led-backlight/unbind Fix by adding a devlink between the consuming led-backlight device and the supplying LED device, as other drivers and subsystems do as well. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | dtb-aarch64 opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-64kb opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-64kb sles 15.7 | 6.4.0-150700.53.28.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-64kb sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-azure opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-azure sles 15.7 | 6.4.0-150700.20.24.1 | [SUSE-SU-2026:0281-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0281-1.md) | Jan 23, 2026 | | Linux | kernel-azure sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-default opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-default sles 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-default sles 15.7 | 6.4.0-150700.53.28.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-default sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.84.1.150600.12.38.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-default-base opensuse-leap 16.0 | 6.12.0-160000.9.1.160000.2.6 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.84.1.150600.12.38.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-default-base sles 15.7 | 6.4.0-150700.53.28.1.150700.17.19.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-default-base sles 16.0 | 6.12.0-160000.9.1.160000.2.6 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-docs opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-docs sles 15.7 | 6.4.0-150700.53.28.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-docs sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-kvmsmall opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-kvmsmall sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-livepatch-SLE15-SP6_Update_19 sles 15.6 | 1-150600.13.3.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-livepatch-SLE15-SP7-RT_Update_8 sles 15.7 | 1-150700.1.3.1 | [SUSE-SU-2026:0278-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0278-1.md) | Jan 23, 2026 | | Linux | kernel-livepatch-SLE15-SP7_Update_8 sles 15.7 | 1-150700.15.3.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-obs-build opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-obs-build sles 15.7 | 6.4.0-150700.53.28.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-obs-qa opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-obs-qa sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-rt opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-source opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-source sles 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-source sles 15.7 | 6.4.0-150700.53.28.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-source sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-source-azure sles 15.7 | 6.4.0-150700.20.24.1 | [SUSE-SU-2026:0281-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0281-1.md) | Jan 23, 2026 | | Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-syms opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-syms sles 15.7 | 6.4.0-150700.53.28.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-syms sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | kernel-syms-azure sles 15.7 | 6.4.0-150700.20.24.1 | [SUSE-SU-2026:0281-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0281-1.md) | Jan 23, 2026 | | Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.84.1 | [SUSE-SU-2026:0293-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0293-1.md) | Jan 26, 2026 | | Linux | kernel-zfcpdump opensuse-leap 16.0 | 6.12.0-160000.9.1 | [OPENSUSE-SU-2026:20145-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20145-1.md) | Feb 2, 2026 | | Linux | kernel-zfcpdump sles 15.7 | 6.4.0-150700.53.28.1 | [SUSE-SU-2026:0315-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0315-1.md) | Jan 28, 2026 | | Linux | kernel-zfcpdump sles 16.0 | 6.12.0-160000.9.1 | [SUSE-SU-2026:20220-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20220-1.md) | Feb 2, 2026 | | Linux | linux Debian 12.15 (bookworm) | 6.1.162-1 | [DEBIAN-CVE-2025-68758](https://patchblox.com/security/data/fix/linux/debian-cve-2025-68758.md) | Jan 5, 2026 | | Linux | linux Debian 13.5 (trixie) | 6.12.63-1 | [DEBIAN-CVE-2025-68758](https://patchblox.com/security/data/fix/linux/debian-cve-2025-68758.md) | Jan 5, 2026 | | Linux | linux Debian 14 | 6.17.13-1 | [DEBIAN-CVE-2025-68758](https://patchblox.com/security/data/fix/linux/debian-cve-2025-68758.md) | Jan 5, 2026 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.