CVE-2024-42093: linux Out-of-bounds Write
Vulnerability summary
CVE-2024-42093 is a high (CVSS 7.3) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 36 · Related 35Timeline
- 29-07-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
EPSS trend
Probability
0.23%
Chance of exploitation in the next 30 days
Percentile
13%
Versus all other CVEs
30-day change
+0.01 pp
From 0.22% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu125 products
- linux< 5.4.0-195.215 | < 5.15.0-121.131 | < 6.8.0-48.48
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.4.0-1132.142 | < 5.15.0-1069.75 | < 6.8.0-1018.20
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 93ddf0b211a0a0367d01c9587169c16ed77b4b98, < b2262b3be27cee334a2fa175ae3afb53f38fb0b1 | ≥ 93ddf0b211a0a0367d01c9587169c16ed77b4b98, < 763896ab62a672d728f5eb10ac90d98c607a8509 | ≥ 93ddf0b211a0a0367d01c9587169c16ed77b4b98, < a55afc0f5f20ba30970aaf7271929dc00eee5e7d | ≥ 93ddf0b211a0a0367d01c9587169c16ed77b4b98, < 48147337d7efdea6ad6e49f5b8eb894b95868ef0 | ≥ 93ddf0b211a0a0367d01c9587169c16ed77b4b98, < 69f49527aea12c23b78fb3d0a421950bf44fb4e2 | ≥ 93ddf0b211a0a0367d01c9587169c16ed77b4b98, < 5e4f25091e6d06e99a23f724c839a58a8776a527 | ≥ 93ddf0b211a0a0367d01c9587169c16ed77b4b98, < d33fe1714a44ff540629b149d8fab4ac6967585c | 4.16
- linux_kernel< 5.4.279 | ≥ 5.5, < 5.10.221 | ≥ 5.11, < 5.15.162 | ≥ 5.16, < 6.1.97 | ≥ 6.2, < 6.6.37 | ≥ 6.7, < 6.9.8
Debian1 product
- linux< 6.1.98-1 | < 6.9.8-1
3 vendors · 128 products
