Answer in brief
CVE-2024-42285 records a Unknown severity vulnerability in RDMA/iwcm: Fix a use-after-free related to destroying CM IDs. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-42285 records a Unknown severity vulnerability in RDMA/iwcm: Fix a use-after-free related to destroying CM IDs. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <d91d253c87fd1efece521ff2612078a35af673c6 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <7f25f296fc9bd0435be14e89bf657cd615a23574 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <94ee7ff99b87435ec63211f632918dc7f44dac79 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <557d035fe88d78dd51664f4dc0e1896c04c97cf6 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <ff5bbbdee08287d75d72e65b72a2b76d9637892a || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <ee39384ee787e86e9db4efb843818ef0ea9cb8ae || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <aee2424246f9f1dadc33faa78990c1e2eb7826e4 | d91d253c87fd1efece521ff2612078a35af673c6, 7f25f296fc9bd0435be14e89bf657cd615a23574, 94ee7ff99b87435ec63211f632918dc7f44dac79, 557d035fe88d78dd51664f4dc0e1896c04c97cf6, dc8074b8901caabb97c2d353abd6b4e7fa5a59a5, ff5bbbdee08287d75d72e65b72a2b76d9637892a, ee39384ee787e86e9db4efb843818ef0ea9cb8ae, aee2424246f9f1dadc33faa78990c1e2eb7826e4 |
| Linux/Linuxgeneric | 4.8 | Not reported |
Published upstream
Aug 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows: conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler; rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <d91d253c87fd1efece521ff2612078a35af673c6 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <7f25f296fc9bd0435be14e89bf657cd615a23574 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <94ee7ff99b87435ec63211f632918dc7f44dac79 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <557d035fe88d78dd51664f4dc0e1896c04c97cf6 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <ff5bbbdee08287d75d72e65b72a2b76d9637892a || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <ee39384ee787e86e9db4efb843818ef0ea9cb8ae || >=59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 <aee2424246f9f1dadc33faa78990c1e2eb7826e4 | d91d253c87fd1efece521ff2612078a35af673c6, 7f25f296fc9bd0435be14e89bf657cd615a23574, 94ee7ff99b87435ec63211f632918dc7f44dac79, 557d035fe88d78dd51664f4dc0e1896c04c97cf6, dc8074b8901caabb97c2d353abd6b4e7fa5a59a5, ff5bbbdee08287d75d72e65b72a2b76d9637892a, ee39384ee787e86e9db4efb843818ef0ea9cb8ae, aee2424246f9f1dadc33faa78990c1e2eb7826e4 |
| Linux/Linuxgeneric | 4.8 | Not reported |
Published upstream
Aug 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows: conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler; rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.
Quoted source text, attributed separately from HOL analysis.