CVE-2024-42147: crypto: hisilicon/debugfs - Fix debugfs uninit process issue
In the Linux kernel, the following vulnerability has been resolved:
crypto: hisilicon/debugfs - Fix debugfs uninit process issue
During the zip probe process, the debugfs failure does not stop the probe. When debugfs initialization fails, jumping to the error branch will also release regs, in addition to its own rollback operation.
As a result, it may be released repeatedly during the regs uninit process. Therefore, the null check needs to be added to the regs uninit process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42147?
CVE-2024-42147 has not been assigned a CVSS score yet, but it is related to a debugfs uninitialized process issue which could potentially lead to system instability.
How do I fix CVE-2024-42147?
To fix CVE-2024-42147, update the kernel to a version that includes the patch, specifically versions 6.1.123-1 or 6.12.11-1.
What software is affected by CVE-2024-42147?
CVE-2024-42147 affects multiple versions of the Linux kernel, specifically versions up to 6.1.98, between 6.2 and 6.6.39, and between 6.7 and 6.9.9.
Is there a workaround for CVE-2024-42147?
There is no established workaround for CVE-2024-42147, and it is recommended to apply the available updates as soon as possible.
What is the nature of the vulnerability CVE-2024-42147?
CVE-2024-42147 relates to an issue in the Linux kernel regarding debugfs that does not halt the zip probe process upon failure, potentially affecting system functionality.