Register for the AI for Security Summit: Join Figma, Perplexity & Wiz

CVE-2024-42252
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2024-42252 affects the Linux kernel's closure library implementation. The vulnerability was discovered in August 2024 and involves a BUG_ON() condition that could be triggered in the wild, potentially causing a kernel panic. The issue affects Linux kernel versions up to (excluding) 6.9.11, as well as 6.10-rc1 through 6.10-rc4 (NVD).

Technical details

The vulnerability exists in the closure_put_after_sub() function within lib/closure.c where a BUG_ON() condition could be triggered, leading to a kernel panic. The issue occurs when certain guard bits are set or when closure reference hits zero with incorrect flags. The vulnerability has a CVSS v3.1 Base Score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

Impact

When exploited, this vulnerability can cause a kernel panic, leading to system crashes and denial of service. The issue specifically affects the system's stability when certain conditions in the closure library are triggered, potentially impacting system availability (Ubuntu).

Exploitability

The vulnerability requires local access and can be triggered through the closure library's reference counting mechanism. A proof-of-concept exists showing the vulnerability being triggered in CI testing, resulting in a kernel panic with specific call traces (Kernel Patch).

Mitigation and workarounds

The issue has been fixed by changing the BUG_ON() conditions to WARN_ON() in the closure library implementation. Multiple Linux distributions have released patches, including Ubuntu which has provided fixes across various kernel versions. For Ubuntu systems, users should update to the patched kernel versions available for their specific release (Ubuntu Security Notice).

Additional resources

Linux Distribution fix status

Fix availability across major Linux distributions and their releases.

Debian

Fixed

bookworm

linux: 6.1.123-1

Fixed

bullseye

linux-6.1: 6.1.128-1~deb11u1

Fixed

sid

linux: 6.9.11-1

Fixed

trixie

linux: 6.9.11-1

Fixed

SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-89775CRITICAL9.3
  • Linux Kernel logoLinux Kernel
  • kernel-rt-debug-modules
NoNoSep 16, 2026
CVE-2026-89771HIGH7.8
  • Linux Kernel logoLinux Kernel
  • kernel-rt-modules-internal
NoNoSep 11, 2026
CVE-2026-89912HIGH7.1
  • Linux Kernel logoLinux Kernel
  • kernel-debug-modules-internal
NoYesSep 16, 2026
CVE-2026-89772HIGH7
  • Linux Kernel logoLinux Kernel
  • linux-hwe-7.0
NoNoSep 11, 2026
CVE-2026-89773MEDIUM5.5
  • Linux Kernel logoLinux Kernel
  • linux-xilinx
NoYesSep 11, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management