{"id":"CVE-2024-42128","title":"leds: an30259a: Use devm_mutex_init() for mutex initialization","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nleds: an30259a: Use devm_mutex_init() for mutex initialization\n\nIn this driver LEDs are registered using devm_led_classdev_register()\nso they are automatically unregist…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 56c05de9749534436f1a3c7859a8167f34dd5010","Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 3ead19aa341de89a8c3d88a091d8093ebea622e8","Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 9dba44460bfca657ca43f03ea9bafa4f9f7dd077","Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < c382e2e3eccb6b7ca8c7aff5092c1668428e7de6","Linux 4.20"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-10T16:16:35.114946Z"},"published":"2024-07-30","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:18:52.791Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-42128","references":[{"url":"https://git.kernel.org/stable/c/56c05de9749534436f1a3c7859a8167f34dd5010"},{"url":"https://git.kernel.org/stable/c/3ead19aa341de89a8c3d88a091d8093ebea622e8"},{"url":"https://git.kernel.org/stable/c/9dba44460bfca657ca43f03ea9bafa4f9f7dd077"},{"url":"https://git.kernel.org/stable/c/c382e2e3eccb6b7ca8c7aff5092c1668428e7de6"}],"tags":["cve.org"],"epss":0.00225,"epssPercentile":0.13195,"ingestedAt":"2026-11-03T13:45:42.682Z","slug":"CVE-2024-42128","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nleds: an30259a: Use devm_mutex_init() for mutex initialization\n\nIn this driver LEDs are registered using devm_led_classdev_register()\nso they are automatically unregistered after module's remove() is done.\nled_classdev_unregister() calls module's led_set_brightness() to turn off\nthe LEDs and that callback uses mutex which was destroyed already\nin module's remove() so use devm API instead.\n\n## Affected\n\n- `Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 56c05de9749534436f1a3c7859a8167f34dd5010`\n- `Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 3ead19aa341de89a8c3d88a091d8093ebea622e8`\n- `Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 9dba44460bfca657ca43f03ea9bafa4f9f7dd077`\n- `Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < c382e2e3eccb6b7ca8c7aff5092c1668428e7de6`\n- `Linux 4.20`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}