CVE-2026-93171: leds: lp5860: Fix a potential double-unlock
Published Sep 17, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
leds: lp5860: Fix a potential double-unlock
In lp5860deviceinit(), if lp5860initdt() fails, an already unlocked mutex is unlocked another time.
Slightly rework how the lock is taken/released to avoid this potential double unlock.
Affected Software
1 affected component
Linux Kernel
Event History
Sep 17, 2026
CVE Published
via MITRE·04:12 PM
Data Sourced
via MITRE·04:12 PM
Description
Frequently Asked Questions
1
Under what condition can this occur?
The issue can occur when lp5860_device_init() calls lp5860_init_dt() and lp5860_init_dt() fails. In that error path, a mutex that has already been unlocked may be unlocked again.
2
Is this issue still present in the referenced fixes?
No. The vulnerability description states that it has been resolved by reworking how the lock is acquired and released, and two stable kernel fix references are provided.