Answer in brief
CVE-2024-42090 records a Unknown severity vulnerability in pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=42fed7ba44e4e8c1fb27b28ad14490cb1daff3c7 <e65a0dc2e85efb28e182aca50218e8a056d0ce04 || >=42fed7ba44e4e8c1fb27b28ad14490cb1daff3c7 <420ce1261907e5dbeda1e4daffd5b6c76f8188c0 || >=42fed7ba44e4e8c1fb27b28ad14490cb1daff3c7 <b813e3fd102a959c5b208ed68afe27e0137a561b || >=42fed7ba44e4e8c1fb27b28ad14490cb1daff3c7 <01fe2f885f7813f8aed5d3704b384a97b1116a9e || >=42fed7ba44e4e8c1fb27b28ad14490cb1daff3c7 <b36efd2e3e22a329444b6b24fa48df6d20ae66e6 || >=42fed7ba44e4e8c1fb27b28ad14490cb1daff3c7 <4038c57bf61631219b31f1bd6e92106ec7f084dc || >=42fed7ba44e4e8c1fb27b28ad14490cb1daff3c7 <48a7a7c9571c3e62f17012dd7f2063e926179ddd || >=42fed7ba44e4e8c1fb27b28ad14490cb1daff3c7 <adec57ff8e66aee632f3dd1f93787c13d112b7a1 | e65a0dc2e85efb28e182aca50218e8a056d0ce04, 420ce1261907e5dbeda1e4daffd5b6c76f8188c0, b813e3fd102a959c5b208ed68afe27e0137a561b, 01fe2f885f7813f8aed5d3704b384a97b1116a9e, b36efd2e3e22a329444b6b24fa48df6d20ae66e6, 4038c57bf61631219b31f1bd6e92106ec7f084dc, 48a7a7c9571c3e62f17012dd7f2063e926179ddd, adec57ff8e66aee632f3dd1f93787c13d112b7a1 |
| Linux/Linuxgeneric | 3.10 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <V1.1.1 | V1.1.1 |
Published upstream
Jul 29, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl(), pinctrl_maps_mutex is acquired before calling add_setting(). If add_setting() returns -EPROBE_DEFER, create_pinctrl() calls pinctrl_free(). However, pinctrl_free() attempts to acquire pinctrl_maps_mutex, which is already held by create_pinctrl(), leading to a potential deadlock. This patch resolves the issue by releasing pinctrl_maps_mutex before calling pinctrl_free(), preventing the deadlock. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
Quoted source text, attributed separately from HOL analysis.