Answer in brief
CVE-2024-42094 records a Unknown severity vulnerability in net/iucv: Avoid explicit cpumask var allocation on stack. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RST2428P (generic), Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 family (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RST2428P (generic), Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 family (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2356f4cb191100a5e92d537f13e5efdbc697e9cb <2b085521be5292016097b5e7ca81b26be3f7098d || >=2356f4cb191100a5e92d537f13e5efdbc697e9cb <842afb47d84536fc976fece8fb6c54bea711ad1a || >=2356f4cb191100a5e92d537f13e5efdbc697e9cb <9dadab0db7d904413ea1cdaa13f127da05c31e71 || >=2356f4cb191100a5e92d537f13e5efdbc697e9cb <0af718a690acc089aa1bbb95a93df833d864ef53 || >=2356f4cb191100a5e92d537f13e5efdbc697e9cb <d85ca8179a54ff8cf1e1f8c3c9e3799831319bae || >=2356f4cb191100a5e92d537f13e5efdbc697e9cb <724e7965af054079242b8d6f7e50ee226730a756 || >=2356f4cb191100a5e92d537f13e5efdbc697e9cb <2d090c7f7be3b26fcb80ac04d08a4a8062b1d959 || >=2356f4cb191100a5e92d537f13e5efdbc697e9cb <be4e1304419c99a164b4c0e101c7c2a756b635b9 | 2b085521be5292016097b5e7ca81b26be3f7098d, 842afb47d84536fc976fece8fb6c54bea711ad1a, 9dadab0db7d904413ea1cdaa13f127da05c31e71, 0af718a690acc089aa1bbb95a93df833d864ef53, d85ca8179a54ff8cf1e1f8c3c9e3799831319bae, 724e7965af054079242b8d6f7e50ee226730a756, 2d090c7f7be3b26fcb80ac04d08a4a8062b1d959, be4e1304419c99a164b4c0e101c7c2a756b635b9 |
| Linux/Linuxgeneric | 2.6.21 | Not reported |
| Siemens/RUGGEDCOM RST2428Pgeneric | >=0 <V3.1 | V3.1 |
| Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 familygeneric | >=0 <V3.1 | V3.1 |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <V1.1.1 | V1.1.1 |
Published upstream
Jul 29, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it.
Quoted source text, attributed separately from HOL analysis.