CVE-2024-42128

Source
https://cve.org/CVERecord?id=CVE-2024-42128
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42128.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-42128
Downstream
BELL (1)
DEBIAN (1)
ECHO (1)
MGASA (2)
OESA (4)
ROOT (3)
UBUNTU (1)
Published
2024-07-30T07:46:24Z
Modified
2026-11-01T02:30:58Z
Summary
leds: an30259a: Use devm_mutex_init() for mutex initialization
Details

In the Linux kernel, the following vulnerability has been resolved:

leds: an30259a: Use devm_mutex_init() for mutex initialization

In this driver LEDs are registered using devm_led_classdev_register() so they are automatically unregistered after module's remove() is done. led_classdev_unregister() calls module's led_set_brightness() to turn off the LEDs and that callback uses mutex which was destroyed already in module's remove() so use devm API instead.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42128.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9
Fixed
56c05de9749534436f1a3c7859a8167f34dd5010
Fixed
3ead19aa341de89a8c3d88a091d8093ebea622e8
Fixed
9dba44460bfca657ca43f03ea9bafa4f9f7dd077
Fixed
c382e2e3eccb6b7ca8c7aff5092c1668428e7de6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42128.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.39
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42128.json"