CVE-2024-42129

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the use of mutex initialization in the Linux kernel's leds: mlxreg driver. LEDs are registered using devm led classdev register(), which automatically unregisters them after the module's remove() is done. However, led classdev unregister() calls the module's led set brightness() to turn off the LEDs, and this callback uses a mutex that was already destroyed in the module's remove(). To resolve this, devm mutex init() is used for mutex initialization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.