PT-2024-29736 · Linux+2 · Linux Kernel+2

Published 2024-03-28 · Updated 2025-10-03 · CVE-2024-42081

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns a NULL pointer check in the Linux kernel's drm/xe/xe devcoredump module. Specifically, it involves checking if 'coredump' is not NULL before assigning 'xe devcoredump snapshot *' and 'xe device *'. The problem and its resolution are described in a series of version updates (v2 through v5), which include fixing commit messages, defining variables before code, dropping return checks for coredump to xe, and modifying misleading commit messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-10855

ALT-PU-2025-12647

AZL-47136

AZL-47222

BDU:2025-02986

CVE-2024-42081

Affected Products

Alt Linux

Astra Linux

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42081.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-42081 · Security Note
• https://ubuntu.com/security/CVE-2024-42081 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-42081 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-42081 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-47136 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-47222 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-42081 · Security Note
• https://git.kernel.org/stable/c/76ec0e33707282d5321555698d902f4e067aff37 · Patch
• https://bdu.fstec.ru/vul/2025-02986 · Security Note
• https://osv.dev/vulnerability/CVE-2024-42081 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-42081 · Vendor Advisory
• https://git.kernel.org/stable/c/b15e65349553b1689d15fbdebea874ca5ae2274a · Patch
• https://security-tracker.debian.org/tracker/CVE-2024-42081 · Vendor Advisory
• https://t.me/cvedetector/1875 · Telegram Post