CVE-2024-42129 is a medium severity vulnerability in the Linux kernel's mlxreg LED driver. The issue arises from improper mutex initialization, where a mutex used in the led_set_brightness() callback is destroyed before the callback is invoked during module removal. This can lead to use-after-free conditions affecting system availability. The vulnerability has been resolved by switching to devm_mutex_init() to properly manage the mutex lifecycle.