CVE-2024-42094: linux Out-of-bounds Write
Vulnerability summary
CVE-2024-42094 is a high (CVSS 7.1) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 29 · Related 25Timeline
- 29-07-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
13%
Versus all other CVEs
30-day change
0.00 pp
From 0.24% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu128 products
- linux< 5.15.0-121.131 | < 6.8.0-48.48 | < 4.15.0-231.243 | < 5.4.0-195.215
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1069.75 | < 6.8.0-1018.20 | < 4.15.0-1175.188 | < 5.4.0-1132.142
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 2356f4cb191100a5e92d537f13e5efdbc697e9cb, < 2b085521be5292016097b5e7ca81b26be3f7098d | ≥ 2356f4cb191100a5e92d537f13e5efdbc697e9cb, < 842afb47d84536fc976fece8fb6c54bea711ad1a | ≥ 2356f4cb191100a5e92d537f13e5efdbc697e9cb, < 9dadab0db7d904413ea1cdaa13f127da05c31e71 | ≥ 2356f4cb191100a5e92d537f13e5efdbc697e9cb, < 0af718a690acc089aa1bbb95a93df833d864ef53 | ≥ 2356f4cb191100a5e92d537f13e5efdbc697e9cb, < d85ca8179a54ff8cf1e1f8c3c9e3799831319bae | ≥ 2356f4cb191100a5e92d537f13e5efdbc697e9cb, < 724e7965af054079242b8d6f7e50ee226730a756 | ≥ 2356f4cb191100a5e92d537f13e5efdbc697e9cb, < 2d090c7f7be3b26fcb80ac04d08a4a8062b1d959 | ≥ 2356f4cb191100a5e92d537f13e5efdbc697e9cb, < be4e1304419c99a164b4c0e101c7c2a756b635b9 | 2.6.21
- linux_kernel< 4.19.317 | ≥ 4.20, < 5.4.279 | ≥ 5.5, < 5.10.221 | ≥ 5.11, < 5.15.162 | ≥ 5.16, < 6.1.97 | ≥ 6.2, < 6.6.37 | ≥ 6.7, < 6.9.8
Debian1 product
- linux< 6.1.98-1 | < 6.9.8-1
3 vendors · 131 products
