---
id: CVE-2024-42128
title: 'leds: an30259a: Use devm_mutex_init() for mutex initialization'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  leds: an30259a: Use devm_mutex_init() for mutex initialization

  In this driver LEDs are registered using devm_led_classdev_register()
  so they are automatically unregist…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 <
    56c05de9749534436f1a3c7859a8167f34dd5010
  - >-
    Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 <
    3ead19aa341de89a8c3d88a091d8093ebea622e8
  - >-
    Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 <
    9dba44460bfca657ca43f03ea9bafa4f9f7dd077
  - >-
    Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 <
    c382e2e3eccb6b7ca8c7aff5092c1668428e7de6
  - Linux 4.20
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-10T16:16:35.114946Z'
published: '2024-07-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:18:52.791Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-42128'
references:
  - url: 'https://git.kernel.org/stable/c/56c05de9749534436f1a3c7859a8167f34dd5010'
  - url: 'https://git.kernel.org/stable/c/3ead19aa341de89a8c3d88a091d8093ebea622e8'
  - url: 'https://git.kernel.org/stable/c/9dba44460bfca657ca43f03ea9bafa4f9f7dd077'
  - url: 'https://git.kernel.org/stable/c/c382e2e3eccb6b7ca8c7aff5092c1668428e7de6'
tags:
  - cve.org
epss: 0.00225
epssPercentile: 0.13195
ingestedAt: '2026-11-03T13:45:42.682Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

leds: an30259a: Use devm_mutex_init() for mutex initialization

In this driver LEDs are registered using devm_led_classdev_register()
so they are automatically unregistered after module's remove() is done.
led_classdev_unregister() calls module's led_set_brightness() to turn off
the LEDs and that callback uses mutex which was destroyed already
in module's remove() so use devm API instead.

## Affected

- `Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 56c05de9749534436f1a3c7859a8167f34dd5010`
- `Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 3ead19aa341de89a8c3d88a091d8093ebea622e8`
- `Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < 9dba44460bfca657ca43f03ea9bafa4f9f7dd077`
- `Linux >= 2d00f35c55e74fcb5626c9aa336c1ed697cd2ae9 < c382e2e3eccb6b7ca8c7aff5092c1668428e7de6`
- `Linux 4.20`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.