CVE-2024-42128: Linux kernel · leds: an30259a: Use devm_mutex_init() for mutex initialization
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 30 Oct 2026, 15:20 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 30 Jul 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
A fix is available in the Linux kernel by using devm_mutex_init() for mutex initialization in the an30259a LED driver. Users should update to the fixed kernel version once available. No additional mitigation steps are indicated.
Description
A vulnerability in the Linux kernel LED driver an30259a was fixed by changing mutex initialization to use devm_mutex_init(). The issue involved a mutex being destroyed before it was used in a callback during module removal, potentially causing use-after-free or race conditions.
References
- git.kernel.org/stable/c/56c05de9749534436f1a3c7859a8167f34dd5010 (opens in a new tab)
- git.kernel.org/stable/c/3ead19aa341de89a8c3d88a091d8093ebea622e8 (opens in a new tab)
- git.kernel.org/stable/c/9dba44460bfca657ca43f03ea9bafa4f9f7dd077 (opens in a new tab)
- git.kernel.org/stable/c/c382e2e3eccb6b7ca8c7aff5092c1668428e7de6 (opens in a new tab)