Riskcovery

CVE-2024-42128

leds: an30259a: Use devm_mutex_init() for mutex initialization

State
Published
Severity
Not scored
Published
Jul 30, 2024
Updated
Oct 30, 2026
Reserved
Jul 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

leds: an30259a: Use devm_mutex_init() for mutex initialization

In this driver LEDs are registered using devm_led_classdev_register() so they are automatically unregistered after module's remove() is done. led_classdev_unregister() calls module's led_set_brightness() to turn off the LEDs and that callback uses mutex which was destroyed already in module's remove() so use devm API instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 to before 56c05de9749534436f1a3c7859a8167f34dd5010Affected
  • 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 to before 3ead19aa341de89a8c3d88a091d8093ebea622e8Affected
  • 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 to before 9dba44460bfca657ca43f03ea9bafa4f9f7dd077Affected
  • 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 to before c382e2e3eccb6b7ca8c7aff5092c1668428e7de6Affected
LinuxLinux
  • 4.20Affected
  • before 4.20Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.39 through 6.6.*Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.