CVE-2024-42129: leds: mlxreg: Use devm_mutex_init() for mutex initialization
In the Linux kernel, the following vulnerability has been resolved:
leds: mlxreg: Use devmmutexinit() for mutex initialization
In this driver LEDs are registered using devmledclassdevregister() so they are automatically unregistered after module's remove() is done. ledclassdevunregister() calls module's ledsetbrightness() to turn off the LEDs and that callback uses mutex which was destroyed already in module's remove() so use devm API instead.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42129?
CVE-2024-42129 has a severity rating that reflects its potential impact on system security, but further details on the specific rating should be checked in updated security advisories.
How do I fix CVE-2024-42129?
To fix CVE-2024-42129, you should update the affected Linux kernel packages to version 6.12.11-1 or 6.12.12-1 or later.
Which versions of Linux are affected by CVE-2024-42129?
CVE-2024-42129 affects Linux kernel versions up to 5.10.226-1 and 6.1.123-1.
Does CVE-2024-42129 require a reboot to apply the fix?
Yes, applying the fix for CVE-2024-42129 typically requires a system reboot to ensure the updated kernel is in use.
Is CVE-2024-42129 a local or remote vulnerability?
CVE-2024-42129 is primarily considered a local vulnerability, affecting unauthorized access by local users.