CVE-2024-42129

leds: mlxreg: Use devm_mutex_init() for mutex initialization

State: Published
Severity: Not scored
Published: Jul 30, 2024
Updated: May 11, 2026
Reserved: Jul 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

leds: mlxreg: Use devm_mutex_init() for mutex initialization

In this driver LEDs are registered using devm_led_classdev_register() so they are automatically unregistered after module's remove() is done. led_classdev_unregister() calls module's led_set_brightness() to turn off the LEDs and that callback uses mutex which was destroyed already in module's remove() so use devm API instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	386570d76f2f25a347a7118fa54315d56b46e7be to before 618c6ce83471ab4f7ac744d27b9d03af173bc141Affected 386570d76f2f25a347a7118fa54315d56b46e7be to before 172ffd26a5af13e951d0e82df7cfc5a95b04fa80Affected 386570d76f2f25a347a7118fa54315d56b46e7be to before 3b62888307ae44b68512d3f7735c26a4c8e45b51Affected 386570d76f2f25a347a7118fa54315d56b46e7be to before efc347b9efee1c2b081f5281d33be4559fa50a16Affected
LinuxLinux	4.17Affected before 4.17Not affected 6.1.132 through 6.1.Not affected 6.6.63 through 6.6.Not affected 6.9.9 through 6.9.*Not affected 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.