PT-2024-29761 · Linux+6 · Linux Kernel+6

Published

2024-04-11

·

Updated

2026-05-26

·

CVE-2024-42129

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the use of mutex initialization in the Linux kernel's leds: mlxreg driver. LEDs are registered using devm led classdev register(), which automatically unregisters them after the module's remove() is done. However, led classdev unregister() calls the module's led set brightness() to turn off the LEDs, and this callback uses a mutex that was already destroyed in the module's remove(). To resolve this, devm mutex init() is used for mutex initialization.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Initialization

Use of Uninitialized Resource

Weakness Enumeration

CWE-665CWE-908

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
BDU:2025-12252
CVE-2024-42129
DLA-4193-1
DSA-5900-1
ECHO-C53B-F085-2752
OESA-2024-1960
OESA-2024-1962
OESA-2024-1964
OESA-2024-2258
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu