🛡️ CVE-2024-42252 on Ubuntu — linux

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG_ON() can be hit in the wild, it shouldn't be a BUG_ON() For reference, this has popped up once in the CI, and we'll need more info to debug it: 03240 ------------[ cut here ]------------ 03240 kernel BUG at lib/closure.c:21! 03240 kernel BUG at lib/closure.c:21! 03240 Internal error: Oops - BUG: 00000000f2000800 [#1] SMP 03240 Modules linked in: 03240 CPU: 15 PID: 40534 Comm: kworker/u80:1 Not tainted 6.10.0-rc4-ktest-ga56da69799bd #25570 03240 Hardware name: linux,dummy-virt (DT) 03240 Workqueue: btree_update btree_interior_update_work 03240 pstate: 00001005 (nzcv daif -PAN -UAO -TCO -DIT +SSBS BTYPE=--) 03240 pc : closure_put+0x224/0x2a0 03240 lr : closure_put+0x24/0x2a0 03240 sp : ffff0000d12071c0 03240 x29: ffff0000d12071c0 x28: dfff800000000000 x27: ffff0000d1207360 03240 x26: 0000000000000040 x25: 0000000000000040 x24: 0000000000000040 03240 x23: ffff0000c1f20180 x22: 0000000000000000 x21: ffff0000c1f20168 03240 x20: 0000000040000000 x19: ffff0000c1f20140 x18: 0000000000000001 03240 x17: 0000000000003aa0 x16: 0000000000003ad0 x15: 1fffe0001c326974 03240 x14: 0000000000000a1e x13: 0000000000000000 x12: 1fffe000183e402d 03240 x11: ffff6000183e402d x10: dfff800000000000 x9 : ffff6000183e402e 03240 x8 : 0000000000000001 x7 : 00009fffe7c1bfd3 x6 : ffff0000c1f2016b 03240 x5 : ffff0000c1f20168 x4 : ffff6000183e402e x3 : ffff800081391954 03240 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 00000000a8000000 03240 Call trace: 03240 closure_put+0x224/0x2a0 03240 bch2_check_for_deadlock+0x910/0x1028 03240 bch2_six_check_for_deadlock+0x1c/0x30 03240 six_lock_slowpath.isra.0+0x29c/0xed0 03240 six_lock_ip_waiter+0xa8/0xf8 03240 __bch2_btree_node_lock_write+0x14c/0x298 03240 bch2_trans_lock_write+0x6d4/0xb10 03240 __bch2_trans_commit+0x135c/0x5520 03240 btree_interior_update_work+0x1248/0x1c10 03240 process_scheduled_works+0x53c/0xd90 03240 worker_thread+0x370/0x8c8 03240 kthread+0x258/0x2e8 03240 ret_from_fork+0x10/0x20 03240 Code: aa1303e0 d63f0020 a94363f7 17ffff8c (d4210000) 03240 ---[ end trace 0000000000000000 ]--- 03240 Kernel panic - not syncing: Oops - BUG: Fatal exception 03240 SMP: stopping secondary CPUs 03241 SMP: failed to stop secondary CPUs 13,15 03241 Kernel Offset: disabled 03241 CPU features: 0x00,00000003,80000008,4240500b 03241 Memory Limit: none 03241 ---[ end Kernel panic - not syncing: Oops - BUG: Fatal exception ]--- 03246 ========= FAILED TIMEOUT copygc_torture_no_checksum in 7200s

Distribution advisory

This page covers CVE-2024-42252 as tracked by Ubuntu, for the package linux. The fix is available in version 6.8.0-48.48; earlier versions remain affected.

How this vulnerability can be exploited

This issue can be reached with local access to the system, attack complexity is low, an attacker needs low-level privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality none, integrity none, availability high.

CVSS metrics in full

The score comes from this vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector: Local — a local account, shell or session on the host is needed.
Attack complexity: Low — the attack works reliably, with no preparation.
Privileges required: Low — an ordinary user account is enough.
User interaction: None — nobody has to be tricked into anything.
Scope: Unchanged — the damage stays inside the vulnerable component.
Confidentiality impact: None.
Integrity impact: None.
Availability impact: High — total loss, or loss the attacker controls.

Affected software

UBUNTU-CVE-2024-42252 is recorded against 129 packages.

linux (fixed in 6.8.0-48.48)
linux-allwinner-5.19
linux-aws (fixed in 6.8.0-1018.20)
linux-aws-5.0
linux-aws-5.11
linux-aws-5.13
linux-aws-5.15 (fixed in 5.15.0-1080.87~20.04.1)
linux-aws-5.19
linux-aws-5.3
linux-aws-5.4 (fixed in 5.4.0-1142.152~18.04.1)
linux-aws-5.8
linux-aws-6.2
linux-aws-6.5
linux-aws-6.8 (fixed in 6.8.0-1018.19~22.04.1)
linux-aws-fips (fixed in 5.15.0-1078.85+fips1)
linux-aws-hwe (fixed in 4.15.0-1177.190~16.04.1)
linux-azure (fixed in 6.8.0-1017.20)
linux-azure-4.15 (fixed in 4.15.0-1185.200)
linux-azure-5.11
linux-azure-5.13
linux-azure-5.15 (fixed in 5.15.0-1081.90~20.04.1)
linux-azure-5.19
linux-azure-5.3
linux-azure-5.4 (fixed in 5.4.0-1145.152~18.04.1)

Show the remaining 105 packages

linux-azure-5.8
linux-azure-6.2
linux-azure-6.5
linux-azure-6.8 (fixed in 6.8.0-1017.20~22.04.1)
linux-azure-edge
linux-azure-fde (fixed in 5.15.0-1081.90.1)
linux-azure-fde-5.19
linux-azure-fde-6.2
linux-azure-fips (fixed in 5.15.0-1080.89+fips1)
linux-bluefield
linux-fips (fixed in 6.8.0-78.78+fips1)
linux-gcp (fixed in 6.8.0-1017.19)
linux-gcp-4.15 (fixed in 4.15.0-1170.187)
linux-gcp-5.11
linux-gcp-5.13
linux-gcp-5.15 (fixed in 5.15.0-1077.86~20.04.1)
linux-gcp-5.19
linux-gcp-5.3
linux-gcp-5.4 (fixed in 5.4.0-1143.152~18.04.1)
linux-gcp-5.8
linux-gcp-6.2
linux-gcp-6.5
linux-gcp-6.8 (fixed in 6.8.0-1017.19~22.04.1)
linux-gcp-fips (fixed in 5.15.0-1077.86+fips1)
linux-gke (fixed in 6.8.0-1013.17)
linux-gke-4.15
linux-gke-5.15
linux-gke-5.4
linux-gkeop (fixed in 6.8.0-1002.4)
linux-gkeop-5.15
linux-gkeop-5.4
linux-hwe
linux-hwe-5.11
linux-hwe-5.13
linux-hwe-5.15 (fixed in 5.15.0-134.145~20.04.1)
linux-hwe-5.19
linux-hwe-5.4 (fixed in 5.4.0-208.228~18.04.1)
linux-hwe-5.8
linux-hwe-6.2
linux-hwe-6.5
linux-hwe-6.8 (fixed in 6.8.0-48.48~22.04.1)
linux-hwe-edge
linux-ibm (fixed in 6.8.0-1015.15)
linux-ibm-5.15 (fixed in 5.15.0-1074.77~20.04.1)
linux-ibm-5.4 (fixed in 5.4.0-1086.91~18.04.1)
linux-ibm-6.8 (fixed in 6.8.0-1015.15~22.04.1)
linux-intel-5.13
linux-intel-iot-realtime (fixed in 5.15.0-1071.73)
linux-intel-iotg (fixed in 5.15.0-1073.79)
linux-intel-iotg-5.15 (fixed in 5.15.0-1073.79~20.04.2)
linux-iot (fixed in 5.4.0-1048.51)
linux-kvm (fixed in 5.15.0-1076.81)
linux-lowlatency (fixed in 6.8.0-48.48.3)
linux-lowlatency-hwe-5.15 (fixed in 5.15.0-133.143~20.04.1)
linux-lowlatency-hwe-5.19
linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.5
linux-lowlatency-hwe-6.8 (fixed in 6.8.0-48.48.3~22.04.1)
linux-lts-xenial (fixed in 4.4.0-263.297~14.04.1)
linux-nvidia (fixed in 6.8.0-1017.19)
linux-nvidia-6.2
linux-nvidia-6.5
linux-nvidia-6.8 (fixed in 6.8.0-1017.19~22.04.1)
linux-nvidia-lowlatency (fixed in 6.8.0-1017.19.1)
linux-nvidia-tegra (fixed in 5.15.0-1033.33)
linux-nvidia-tegra-5.15 (fixed in 5.15.0-1039.39~20.04.1)
linux-nvidia-tegra-igx (fixed in 5.15.0-1021.21)
linux-oem
linux-oem-5.10
linux-oem-5.13
linux-oem-5.14
linux-oem-5.17
linux-oem-5.6
linux-oem-6.0
linux-oem-6.1
linux-oem-6.5
linux-oem-6.8 (fixed in 6.8.0-1016.16)
linux-oracle (fixed in 6.8.0-1015.16)
linux-oracle-5.0
linux-oracle-5.11
linux-oracle-5.13
linux-oracle-5.15 (fixed in 5.15.0-1075.81~20.04.1)
linux-oracle-5.3
linux-oracle-5.4 (fixed in 5.4.0-1138.147~18.04.1)
linux-oracle-5.8
linux-oracle-6.5
linux-oracle-6.8 (fixed in 6.8.0-1015.15~22.04.1)
linux-raspi (fixed in 6.8.0-1014.16)
linux-raspi-5.4 (fixed in 5.4.0-1129.142~18.04.1)
linux-raspi-realtime (fixed in 6.8.0-2013.14)
linux-raspi2
linux-realtime (fixed in 6.8.1-1011.11)
linux-realtime-6.8 (fixed in 6.8.1-1011.11~22.04.1)
linux-riscv (fixed in 6.8.0-48.48.1)
linux-riscv-5.11
linux-riscv-5.15 (fixed in 5.15.0-1073.77~20.04.1)
linux-riscv-5.19
linux-riscv-5.8
linux-riscv-6.5
linux-riscv-6.8 (fixed in 6.8.0-48.48.1~22.04.2)
linux-starfive-5.19
linux-starfive-6.2
linux-starfive-6.5
linux-xilinx (fixed in 6.8.0-1009.10)
linux-xilinx-zynqmp (fixed in 5.15.0-1044.48)

Timeline and source

Published on 8 August 2024 and last revised on 18 August 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

Other advisories for this package

linux has other advisories on record. If you are patching this one, these are worth checking on the same host:

DEBIAN-CVE-2022-4994 (published 30 Jul 2026)
CVE-2026-35233 (4.4 Medium, published 1 May 2026)
CVE-2026-21996 (3.3 Low, published 1 May 2026)
CVE-2026-21991 (5.5 Medium, published 16 Mar 2026)
CGA-mcwh-q4vm-9f29 (published 29 Jan 2026)
CGA-w6xv-3fg4-grm5 (published 29 Jan 2026)
CGA-8vhr-fq3f-qx7q (published 7 Jan 2026)
CGA-p49v-mx3v-9ff2 (published 7 Jan 2026)

CVE-2024-42252 on other distributions

Each distribution ships its own build and its own fixed version. Pick the one you run:

BellSoft — BELL-CVE-2024-42252 Base record — CVE-2024-42252 Debian — DEBIAN-CVE-2024-42252 Debian 11 (Root.io) — ROOT-OS-DEBIAN-11-CVE-2024-42252

Details

Severity Unknown

CVSS Score N/A

CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2024-08-08

Updated 2026-08-20

Modified 2026-08-18

Fix URL N/A

Affected Packages

Software	From version	Fixed in
linux	—	6.8.0-48.48
linux-allwinner-5.19	—	—
linux-aws	—	6.8.0-1018.20
linux-aws-5.0	—	—
linux-aws-5.11	—	—
linux-aws-5.13	—	—
linux-aws-5.15	—	5.15.0-1080.87~20.04.1
linux-aws-5.19	—	—
linux-aws-5.3	—	—
linux-aws-5.4	—	5.4.0-1142.152~18.04.1
linux-aws-5.8	—	—
linux-aws-6.2	—	—
linux-aws-6.5	—	—
linux-aws-6.8	—	6.8.0-1018.19~22.04.1
linux-aws-fips	—	5.15.0-1078.85+fips1
linux-aws-hwe	—	4.15.0-1177.190~16.04.1
linux-azure	—	6.8.0-1017.20
linux-azure-4.15	—	4.15.0-1185.200
linux-azure-5.11	—	—
linux-azure-5.13	—	—
linux-azure-5.15	—	5.15.0-1081.90~20.04.1
linux-azure-5.19	—	—
linux-azure-5.3	—	—
linux-azure-5.4	—	5.4.0-1145.152~18.04.1
linux-azure-5.8	—	—
linux-azure-6.2	—	—
linux-azure-6.5	—	—
linux-azure-6.8	—	6.8.0-1017.20~22.04.1
linux-azure-edge	—	—
linux-azure-fde	—	5.15.0-1081.90.1
linux-azure-fde-5.19	—	—
linux-azure-fde-6.2	—	—
linux-azure-fips	—	5.15.0-1080.89+fips1
linux-bluefield	—	—
linux-fips	—	6.8.0-78.78+fips1
linux-gcp	—	6.8.0-1017.19
linux-gcp-4.15	—	4.15.0-1170.187
linux-gcp-5.11	—	—
linux-gcp-5.13	—	—
linux-gcp-5.15	—	5.15.0-1077.86~20.04.1
linux-gcp-5.19	—	—
linux-gcp-5.3	—	—
linux-gcp-5.4	—	5.4.0-1143.152~18.04.1
linux-gcp-5.8	—	—
linux-gcp-6.2	—	—
linux-gcp-6.5	—	—
linux-gcp-6.8	—	6.8.0-1017.19~22.04.1
linux-gcp-fips	—	5.15.0-1077.86+fips1
linux-gke	—	6.8.0-1013.17
linux-gke-4.15	—	—
linux-gke-5.15	—	—
linux-gke-5.4	—	—
linux-gkeop	—	6.8.0-1002.4
linux-gkeop-5.15	—	—
linux-gkeop-5.4	—	—
linux-hwe	—	—
linux-hwe-5.11	—	—
linux-hwe-5.13	—	—
linux-hwe-5.15	—	5.15.0-134.145~20.04.1
linux-hwe-5.19	—	—
linux-hwe-5.4	—	5.4.0-208.228~18.04.1
linux-hwe-5.8	—	—
linux-hwe-6.2	—	—
linux-hwe-6.5	—	—
linux-hwe-6.8	—	6.8.0-48.48~22.04.1
linux-hwe-edge	—	—
linux-ibm	—	6.8.0-1015.15
linux-ibm-5.15	—	5.15.0-1074.77~20.04.1
linux-ibm-5.4	—	5.4.0-1086.91~18.04.1
linux-ibm-6.8	—	6.8.0-1015.15~22.04.1
linux-intel-5.13	—	—
linux-intel-iot-realtime	—	5.15.0-1071.73
linux-intel-iotg	—	5.15.0-1073.79
linux-intel-iotg-5.15	—	5.15.0-1073.79~20.04.2
linux-iot	—	5.4.0-1048.51
linux-kvm	—	5.15.0-1076.81
linux-lowlatency	—	6.8.0-48.48.3
linux-lowlatency-hwe-5.15	—	5.15.0-133.143~20.04.1
linux-lowlatency-hwe-5.19	—	—
linux-lowlatency-hwe-6.2	—	—
linux-lowlatency-hwe-6.5	—	—
linux-lowlatency-hwe-6.8	—	6.8.0-48.48.3~22.04.1
linux-lts-xenial	—	4.4.0-263.297~14.04.1
linux-nvidia	—	6.8.0-1017.19
linux-nvidia-6.2	—	—
linux-nvidia-6.5	—	—
linux-nvidia-6.8	—	6.8.0-1017.19~22.04.1
linux-nvidia-lowlatency	—	6.8.0-1017.19.1
linux-nvidia-tegra	—	5.15.0-1033.33
linux-nvidia-tegra-5.15	—	5.15.0-1039.39~20.04.1
linux-nvidia-tegra-igx	—	5.15.0-1021.21
linux-oem	—	—
linux-oem-5.10	—	—
linux-oem-5.13	—	—
linux-oem-5.14	—	—
linux-oem-5.17	—	—
linux-oem-5.6	—	—
linux-oem-6.0	—	—
linux-oem-6.1	—	—
linux-oem-6.5	—	—
linux-oem-6.8	—	6.8.0-1016.16
linux-oracle	—	6.8.0-1015.16
linux-oracle-5.0	—	—
linux-oracle-5.11	—	—
linux-oracle-5.13	—	—
linux-oracle-5.15	—	5.15.0-1075.81~20.04.1
linux-oracle-5.3	—	—
linux-oracle-5.4	—	5.4.0-1138.147~18.04.1
linux-oracle-5.8	—	—
linux-oracle-6.5	—	—
linux-oracle-6.8	—	6.8.0-1015.15~22.04.1
linux-raspi	—	6.8.0-1014.16
linux-raspi-5.4	—	5.4.0-1129.142~18.04.1
linux-raspi-realtime	—	6.8.0-2013.14
linux-raspi2	—	—
linux-realtime	—	6.8.1-1011.11
linux-realtime-6.8	—	6.8.1-1011.11~22.04.1
linux-riscv	—	6.8.0-48.48.1
linux-riscv-5.11	—	—
linux-riscv-5.15	—	5.15.0-1073.77~20.04.1
linux-riscv-5.19	—	—
linux-riscv-5.8	—	—
linux-riscv-6.5	—	—
linux-riscv-6.8	—	6.8.0-48.48.1~22.04.2
linux-starfive-5.19	—	—
linux-starfive-6.2	—	—
linux-starfive-6.5	—	—
linux-xilinx	—	6.8.0-1009.10
linux-xilinx-zynqmp	—	5.15.0-1044.48

References

REPORT https://ubuntu.com/security/CVE-2024-42252

REPORT https://www.cve.org/CVERecord?id=CVE-2024-42252

REPORT https://git.kernel.org/linus/339b84ab6b1d66900c27bd999271cb2ae40ce812

REPORT https://git.kernel.org/stable/c/5d85f2ab79d5918a66539ebf046c099f7448db8d

REPORT https://git.kernel.org/stable/c/339b84ab6b1d66900c27bd999271cb2ae40ce812

ADVISORY https://ubuntu.com/security/notices/USN-7089-1

ADVISORY https://ubuntu.com/security/notices/USN-7090-1

ADVISORY https://ubuntu.com/security/notices/USN-7089-2

ADVISORY https://ubuntu.com/security/notices/USN-7089-3

ADVISORY https://ubuntu.com/security/notices/USN-7095-1

ADVISORY https://ubuntu.com/security/notices/USN-7089-4

ADVISORY https://ubuntu.com/security/notices/USN-7089-5

ADVISORY https://ubuntu.com/security/notices/USN-7089-6

ADVISORY https://ubuntu.com/security/notices/USN-7089-7

ADVISORY https://ubuntu.com/security/notices/USN-7156-1

ADVISORY https://ubuntu.com/security/notices/USN-7233-1

ADVISORY https://ubuntu.com/security/notices/USN-7233-2

ADVISORY https://ubuntu.com/security/notices/USN-7233-3

ADVISORY https://ubuntu.com/security/notices/USN-7262-1

ADVISORY https://ubuntu.com/security/notices/USN-7288-1

ADVISORY https://ubuntu.com/security/notices/USN-7289-1

ADVISORY https://ubuntu.com/security/notices/USN-7262-2

ADVISORY https://ubuntu.com/security/notices/USN-7291-1

ADVISORY https://ubuntu.com/security/notices/USN-7288-2

ADVISORY https://ubuntu.com/security/notices/USN-7289-2

ADVISORY https://ubuntu.com/security/notices/USN-7293-1

ADVISORY https://ubuntu.com/security/notices/USN-7294-1

ADVISORY https://ubuntu.com/security/notices/USN-7295-1

ADVISORY https://ubuntu.com/security/notices/USN-7289-3

ADVISORY https://ubuntu.com/security/notices/USN-7305-1

ADVISORY https://ubuntu.com/security/notices/USN-7289-4

ADVISORY https://ubuntu.com/security/notices/USN-7308-1

ADVISORY https://ubuntu.com/security/notices/USN-7294-2

ADVISORY https://ubuntu.com/security/notices/USN-7294-3

ADVISORY https://ubuntu.com/security/notices/USN-7294-4

ADVISORY https://ubuntu.com/security/notices/USN-7331-1

ADVISORY https://ubuntu.com/security/notices/USN-7388-1

ADVISORY https://ubuntu.com/security/notices/USN-7389-1

ADVISORY https://ubuntu.com/security/notices/USN-7390-1

ADVISORY https://ubuntu.com/security/notices/USN-7393-1

ADVISORY https://ubuntu.com/security/notices/USN-7401-1

ADVISORY https://ubuntu.com/security/notices/USN-7413-1

ADVISORY https://ubuntu.com/security/notices/USN-7458-1

ADVISORY https://ubuntu.com/security/notices/USN-7539-1

ADVISORY https://ubuntu.com/security/notices/USN-7540-1

🔗 NVD 🔗 Mitre

Similar Threats

Vulnerability Monitoring

Track new vulnerabilities in linux

UBUNTU-CVE-2024-42252 is rated CVSS 5.5 Medium. BotEraser monitors your WordPress installation and notifies you when software you use appears in our vulnerability database.

Set Up Free Alerts →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ CVE-2024-42252 on Ubuntu — linux

Description

Distribution advisory

How this vulnerability can be exploited

CVSS metrics in full

Affected software

Timeline and source

References

Other advisories for this package

CVE-2024-42252 on other distributions

Track new vulnerabilities in linux

Browse related advisories

Company

Resources

Services

Trusted

Subscribe