CVE-2024-42252

Summary

CVE-2024-42252: A Linux kernel vulnerability involving the use of BUG_ON() instead of WARN_ON() in the closures module has been identified. This issue, which was triggered once in the Continuous Integration (CI) environment, can lead to a kernel panic. The affected function, closure_put, is used in the bch2_trans_commit function, and the vulnerability lies in the six_lock_ip_waiter function call. The consequences of exploiting this flaw could be severe, including system instability and potential data loss. The recommended mitigation is to update the Linux kernel to a fixed version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.