CVE-2024-42095
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2024-42095 affects the Linux kernel's serial driver (8250omap). The vulnerability is related to an erroneous timeout trigger in the UART driver that can lead to a storm of interrupts. This issue was discovered in the serial: 8250omap implementation and affects various Linux kernel versions (NVD, Ubuntu).

Technical details

The vulnerability occurs in the UART driver when an erroneous timeout is triggered. If this erroneous interrupt is not cleared properly, it can lead to a storm of interrupts. The issue specifically affects the serial: 8250_omap driver implementation. The fix involves implementing Errata i2310 solution which includes proper handling of timeout registers and interrupt clearing mechanisms (Kernel Commit).

Impact

If exploited, this vulnerability can cause a denial of service condition through an interrupt storm, potentially affecting system performance and stability (NVD).

Mitigation and workarounds

The issue has been fixed in various Linux kernel versions. Ubuntu has released patches for affected versions: Ubuntu 24.04 LTS (6.8.0-48.48), Ubuntu 22.04 LTS (5.15.0-121.131), and other supported versions. Users should update their systems to the patched versions (Ubuntu).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40344N/AN/A
  • Linux KernelLinux Kernel
  • kernel-debug-modules-internal
NoYesDec 09, 2025
CVE-2025-40343N/AN/A
  • Linux KernelLinux Kernel
  • kernel-64k-debug-devel
NoYesDec 09, 2025
CVE-2025-40342N/AN/A
  • Linux KernelLinux Kernel
  • kernel-64k-debug-devel-matched
NoYesDec 09, 2025
CVE-2025-40341N/AN/A
  • Linux KernelLinux Kernel
  • kernel-rt-64k-debug-modules-extra
NoYesDec 09, 2025
CVE-2025-40340N/AN/A
  • Linux KernelLinux Kernel
  • kernel-rt-64k-debug-kvm
NoYesDec 09, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management