CVE-2024-42128: leds: an30259a: Use devm_mutex_init() for mutex initialization
In the Linux kernel, the following vulnerability has been resolved:
leds: an30259a: Use devmmutexinit() for mutex initialization
In this driver LEDs are registered using devmledclassdevregister() so they are automatically unregistered after module's remove() is done. ledclassdevunregister() calls module's ledsetbrightness() to turn off the LEDs and that callback uses mutex which was destroyed already in module's remove() so use devm API instead.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42128?
The severity of CVE-2024-42128 is identified as moderate.
How do I fix CVE-2024-42128?
To fix CVE-2024-42128, update the Linux kernel to version 6.12.11-1 or later.
What systems are affected by CVE-2024-42128?
CVE-2024-42128 affects certain versions of the Linux kernel in Debian-based distributions.
Is CVE-2024-42128 actively exploited in the wild?
As of now, there is no evidence to suggest that CVE-2024-42128 is being actively exploited.
What components of the Linux kernel are impacted by CVE-2024-42128?
CVE-2024-42128 impacts the LED driver component of the Linux kernel.