CVE-2024-42232 (GCVE-0-2024-42232)
Vulnerability from cvelistv5
Published
2024-08-07 15:14
Modified
2026-08-05 11:35
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_monc_stop() The way the delayed work is handled in ceph_monc_stop() is prone to races with mon_fault() and possibly also finish_hunting(). Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after cancel_delayed_work_sync() runs -- __close_session() doesn't mess with the delayed work in order to avoid interfering with the hunting interval logic. This part was missed in commit b5d91704f53e ("libceph: behave in mon_fault() if cur_mon < 0") and use-after-free can still ensue on monc and objects that hang off of it, with monc->auth and monc->monmap being particularly susceptible to quickly being reused. To fix this: - clear monc->cur_mon and monc->hunting as part of closing the session in ceph_monc_stop() - bail from delayed_work() if monc->cur_mon is cleared, similar to how it's done in mon_fault() and finish_hunting() (based on monc->hunting) - call cancel_delayed_work_sync() after the session is closed
References
Impacted products
Vendor Product Version
Linux Linux Version: 0e04dc26cc594d31ee6b1382b452b6bc83b57937
Version: 0e04dc26cc594d31ee6b1382b452b6bc83b57937
Version: 0e04dc26cc594d31ee6b1382b452b6bc83b57937
Version: 0e04dc26cc594d31ee6b1382b452b6bc83b57937
Version: 0e04dc26cc594d31ee6b1382b452b6bc83b57937
Version: 0e04dc26cc594d31ee6b1382b452b6bc83b57937
Version: 0e04dc26cc594d31ee6b1382b452b6bc83b57937
Version: 0e04dc26cc594d31ee6b1382b452b6bc83b57937
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42232",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:14:16.994766Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:32.623Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:02:36.305Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ceph/mon_client.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1177afeca833174ba83504688eec898c6214f4bf",
              "status": "affected",
              "version": "0e04dc26cc594d31ee6b1382b452b6bc83b57937",
              "versionType": "git"
            },
            {
              "lessThan": "63e5d035e3a7ab7412a008f202633c5e6a0a28ea",
              "status": "affected",
              "version": "0e04dc26cc594d31ee6b1382b452b6bc83b57937",
              "versionType": "git"
            },
            {
              "lessThan": "34b76d1922e41da1fa73d43b764cddd82ac9733c",
              "status": "affected",
              "version": "0e04dc26cc594d31ee6b1382b452b6bc83b57937",
              "versionType": "git"
            },
            {
              "lessThan": "20cf67dcb7db842f941eff1af6ee5e9dc41796d7",
              "status": "affected",
              "version": "0e04dc26cc594d31ee6b1382b452b6bc83b57937",
              "versionType": "git"
            },
            {
              "lessThan": "2d33654d40a05afd91ab24c9a73ab512a0670a9a",
              "status": "affected",
              "version": "0e04dc26cc594d31ee6b1382b452b6bc83b57937",
              "versionType": "git"
            },
            {
              "lessThan": "9525af1f58f67df387768770fcf6d6a8f23aee3d",
              "status": "affected",
              "version": "0e04dc26cc594d31ee6b1382b452b6bc83b57937",
              "versionType": "git"
            },
            {
              "lessThan": "33d38c5da17f8db2d80e811b7829d2822c10625e",
              "status": "affected",
              "version": "0e04dc26cc594d31ee6b1382b452b6bc83b57937",
              "versionType": "git"
            },
            {
              "lessThan": "69c7b2fe4c9cc1d3b1186d1c5606627ecf0de883",
              "status": "affected",
              "version": "0e04dc26cc594d31ee6b1382b452b6bc83b57937",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ceph/mon_client.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.6"
            },
            {
              "lessThan": "4.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.318",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.280",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.222",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.100",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.41",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.318",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.280",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.222",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.163",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.100",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.41",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.10",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: fix race between delayed_work() and ceph_monc_stop()\n\nThe way the delayed work is handled in ceph_monc_stop() is prone to\nraces with mon_fault() and possibly also finish_hunting().  Both of\nthese can requeue the delayed work which wouldn\u0027t be canceled by any of\nthe following code in case that happens after cancel_delayed_work_sync()\nruns -- __close_session() doesn\u0027t mess with the delayed work in order\nto avoid interfering with the hunting interval logic.  This part was\nmissed in commit b5d91704f53e (\"libceph: behave in mon_fault() if\ncur_mon \u003c 0\") and use-after-free can still ensue on monc and objects\nthat hang off of it, with monc-\u003eauth and monc-\u003emonmap being\nparticularly susceptible to quickly being reused.\n\nTo fix this:\n\n- clear monc-\u003ecur_mon and monc-\u003ehunting as part of closing the session\n  in ceph_monc_stop()\n- bail from delayed_work() if monc-\u003ecur_mon is cleared, similar to how\n  it\u0027s done in mon_fault() and finish_hunting() (based on monc-\u003ehunting)\n- call cancel_delayed_work_sync() after the session is closed"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - Both paths that re-arm the delayed work \u2014 `mon_fault()` via `con_fault()` on any socket error/RST, and `finish_hunting()` on a monitor auth reply \u2014 are driven entirely by the remote Ceph monitor over TCP, and the attacker can also force the teardown by making the mon session fail so the mount times out into `destroy_fs_client()`. No local access to the target is needed for the attacker\u0027s contribution.\nAC:L - The attacker controls both sides of the race: it drives connection faults at an arbitrary rate and induces the `ceph_monc_stop()` teardown by refusing/resetting the session, and the window is amplified because `mon_fault()` holds `monc-\u003emutex` while `ceph_monc_stop()` blocks on it after the cancel has already run. The attempt is free and infinitely repeatable across mount/unmount cycles.\nPR:N - The attacker is an unauthenticated remote peer \u2014 `con_fault()` fires on socket errors before any cephx authentication succeeds, and the monitor is the entity the client authenticates *to*, so no credentials on the victim host are required.\nUI:N - No victim action is needed beyond normal, automated cluster operation \u2014 ceph-csi/Kubernetes, autofs and systemd mount units perform cephfs/rbd mount, unmount and retry cycles continuously without human involvement, and each failed or torn-down session is an exploitation attempt.\nS:U - The use-after-free corrupts kernel heap memory and executes within the kernel\u0027s own security authority, with no crossing of a VM, IOMMU, or sandbox boundary.\nC:H - Use-after-free on `ceph_client`/`ceph_mon_client`, `ceph_auth_client` and `ceph_monmap`, with `pick_new_mon()` indexing `monc-\u003emonmap-\u003emon_inst[monc-\u003ecur_mon]` using a base pointer and index both read from freed, attacker-groomable memory \u2014 an out-of-bounds read primitive usable for kernel memory disclosure.\nI:H - `ceph_auth_is_authenticated()` performs `ac-\u003eops-\u003eis_authenticated(ac)`, an indirect call through a function pointer read from a freed slab object the remote monitor can reclaim during the multi-second delay, giving control-flow hijack; `mutex_lock()` and `mod_delayed_work()` additionally write timer/work state into the freed-and-reused allocation.\nA:H - The delayed work executing on freed memory reliably oopses, and `BUG_ON(monc-\u003emonmap-\u003enum_mon \u003c 1)` in `pick_new_mon()` panics the kernel outright when the freed monmap is reused."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:35:57.190Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1177afeca833174ba83504688eec898c6214f4bf"
        },
        {
          "url": "https://git.kernel.org/stable/c/63e5d035e3a7ab7412a008f202633c5e6a0a28ea"
        },
        {
          "url": "https://git.kernel.org/stable/c/34b76d1922e41da1fa73d43b764cddd82ac9733c"
        },
        {
          "url": "https://git.kernel.org/stable/c/20cf67dcb7db842f941eff1af6ee5e9dc41796d7"
        },
        {
          "url": "https://git.kernel.org/stable/c/2d33654d40a05afd91ab24c9a73ab512a0670a9a"
        },
        {
          "url": "https://git.kernel.org/stable/c/9525af1f58f67df387768770fcf6d6a8f23aee3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/33d38c5da17f8db2d80e811b7829d2822c10625e"
        },
        {
          "url": "https://git.kernel.org/stable/c/69c7b2fe4c9cc1d3b1186d1c5606627ecf0de883"
        }
      ],
      "title": "libceph: fix race between delayed_work() and ceph_monc_stop()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42232",
    "datePublished": "2024-08-07T15:14:23.074Z",
    "dateReserved": "2024-07-30T07:40:12.251Z",
    "dateUpdated": "2026-08-05T11:35:57.190Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:02:36.305Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-42232\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:14:16.994766Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:24.328Z\"}}], \"cna\": {\"title\": \"libceph: fix race between delayed_work() and ceph_monc_stop()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"0e04dc26cc594d31ee6b1382b452b6bc83b57937\", \"lessThan\": \"1177afeca833174ba83504688eec898c6214f4bf\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0e04dc26cc594d31ee6b1382b452b6bc83b57937\", \"lessThan\": \"63e5d035e3a7ab7412a008f202633c5e6a0a28ea\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0e04dc26cc594d31ee6b1382b452b6bc83b57937\", \"lessThan\": \"34b76d1922e41da1fa73d43b764cddd82ac9733c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0e04dc26cc594d31ee6b1382b452b6bc83b57937\", \"lessThan\": \"20cf67dcb7db842f941eff1af6ee5e9dc41796d7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0e04dc26cc594d31ee6b1382b452b6bc83b57937\", \"lessThan\": \"2d33654d40a05afd91ab24c9a73ab512a0670a9a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0e04dc26cc594d31ee6b1382b452b6bc83b57937\", \"lessThan\": \"9525af1f58f67df387768770fcf6d6a8f23aee3d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0e04dc26cc594d31ee6b1382b452b6bc83b57937\", \"lessThan\": \"33d38c5da17f8db2d80e811b7829d2822c10625e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0e04dc26cc594d31ee6b1382b452b6bc83b57937\", \"lessThan\": \"69c7b2fe4c9cc1d3b1186d1c5606627ecf0de883\", \"versionType\": \"git\"}], \"programFiles\": [\"net/ceph/mon_client.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.6\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.6\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.318\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.280\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.222\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.163\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.100\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.41\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/ceph/mon_client.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/1177afeca833174ba83504688eec898c6214f4bf\"}, {\"url\": \"https://git.kernel.org/stable/c/63e5d035e3a7ab7412a008f202633c5e6a0a28ea\"}, {\"url\": \"https://git.kernel.org/stable/c/34b76d1922e41da1fa73d43b764cddd82ac9733c\"}, {\"url\": \"https://git.kernel.org/stable/c/20cf67dcb7db842f941eff1af6ee5e9dc41796d7\"}, {\"url\": \"https://git.kernel.org/stable/c/2d33654d40a05afd91ab24c9a73ab512a0670a9a\"}, {\"url\": \"https://git.kernel.org/stable/c/9525af1f58f67df387768770fcf6d6a8f23aee3d\"}, {\"url\": \"https://git.kernel.org/stable/c/33d38c5da17f8db2d80e811b7829d2822c10625e\"}, {\"url\": \"https://git.kernel.org/stable/c/69c7b2fe4c9cc1d3b1186d1c5606627ecf0de883\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nlibceph: fix race between delayed_work() and ceph_monc_stop()\\n\\nThe way the delayed work is handled in ceph_monc_stop() is prone to\\nraces with mon_fault() and possibly also finish_hunting().  Both of\\nthese can requeue the delayed work which wouldn\u0027t be canceled by any of\\nthe following code in case that happens after cancel_delayed_work_sync()\\nruns -- __close_session() doesn\u0027t mess with the delayed work in order\\nto avoid interfering with the hunting interval logic.  This part was\\nmissed in commit b5d91704f53e (\\\"libceph: behave in mon_fault() if\\ncur_mon \u003c 0\\\") and use-after-free can still ensue on monc and objects\\nthat hang off of it, with monc-\u003eauth and monc-\u003emonmap being\\nparticularly susceptible to quickly being reused.\\n\\nTo fix this:\\n\\n- clear monc-\u003ecur_mon and monc-\u003ehunting as part of closing the session\\n  in ceph_monc_stop()\\n- bail from delayed_work() if monc-\u003ecur_mon is cleared, similar to how\\n  it\u0027s done in mon_fault() and finish_hunting() (based on monc-\u003ehunting)\\n- call cancel_delayed_work_sync() after the session is closed\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.318\", \"versionStartIncluding\": \"4.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.280\", \"versionStartIncluding\": \"4.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.222\", \"versionStartIncluding\": \"4.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.163\", \"versionStartIncluding\": \"4.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.100\", \"versionStartIncluding\": \"4.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.41\", \"versionStartIncluding\": \"4.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.10\", \"versionStartIncluding\": \"4.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"4.6\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-01-05T10:52:04.283Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-42232\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-05T10:52:04.283Z\", \"dateReserved\": \"2024-07-30T07:40:12.251Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-08-07T15:14:23.074Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.