PT-2024-29765 · Linux+4 · Linux Kernel+4

Published 2024-07-02 · Updated 2026-05-26 · CVE-2024-42139

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the improper handling of extts events in the Linux kernel, which can cause a kernel crash when the driver is removed while the application ts2phc is running. As a side effect, when the driver is reloaded and the application is started again, remaining extts events for the channel from a previous run will keep firing, and the message "extts on unexpected channel" might be printed to the user. To avoid this, extts events should be disabled when PTP is released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Check for Exceptional Conditions

NULL Pointer Dereference

Weakness Enumeration

CWE-754

CWE-476

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2025-12647

AZL-54162

AZL-54194

BDU:2025-02980

CVE-2024-42139

ECHO-9F1F-94C0-0382

OESA-2024-2124

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3483-1

RHSA-2024:7004

RHSA-2024:7005

SUSE-SU-2024:3190-1

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3383-1

SUSE-SU-2024:3483-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

Affected Products

Alt Linux

Astra Linux

Debian

Linux Kernel

Suse

References · 1250

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42139.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-43859 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42271 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41016 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42139 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43855 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42250 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43829 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42277 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41012 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43884 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43905 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-42139 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02980 · Security Note
• https://osv.dev/vulnerability/OESA-2024-2124 · Vendor Advisory