Answer in brief
CVE-2024-42312 records a Unknown severity vulnerability in sysctl: always initialize i_uid/i_gid. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5ec27ec735ba0477d48c80561cc5e856f0c5dfaf <b2591c89a6e2858796111138c38fcb6851aa1955 || >=5ec27ec735ba0477d48c80561cc5e856f0c5dfaf <34a86adea1f2b3c3f9d864c8cce09dca644601ab || >=5ec27ec735ba0477d48c80561cc5e856f0c5dfaf <1deae34db9f4f8e0e03f891be2e2e15c15c8ac05 || >=5ec27ec735ba0477d48c80561cc5e856f0c5dfaf <ffde3af4b29bf97d62d82e1d45275587e10a991a || >=5ec27ec735ba0477d48c80561cc5e856f0c5dfaf <c7e2f43d182f5dde473389dbb39f16c9f0d64536 || >=5ec27ec735ba0477d48c80561cc5e856f0c5dfaf <98ca62ba9e2be5863c7d069f84f7166b45a5b2f4 || e83234d7ef237931148b4b17834dadf57eb46c12 || 2cbf2af144f0cd08a3361c6299b2e6086b7d21d9 || 2c7b50c7b1d036f71acd9a917a8cb0f9b6e43dab || 7eb45a94c279dd5af4cafaa738ae93737517eef4 || 14cc90952cef94bfa89a6b4a2f55fd9a70f50a16 || >=4.9.187 <4.10 || >=4.14.135 <4.15 || >=4.19.61 <4.20 || >=5.1.20 <5.2 || >=5.2.3 <5.3 | b2591c89a6e2858796111138c38fcb6851aa1955, 34a86adea1f2b3c3f9d864c8cce09dca644601ab, 1deae34db9f4f8e0e03f891be2e2e15c15c8ac05, ffde3af4b29bf97d62d82e1d45275587e10a991a, c7e2f43d182f5dde473389dbb39f16c9f0d64536, 98ca62ba9e2be5863c7d069f84f7166b45a5b2f4, 4.10, 4.15, 4.20, 5.2, 5.3 |
| Linux/Linuxgeneric | 5.3 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <V1.1.1 | V1.1.1 |
Published upstream
Aug 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the sysfs core so set_ownership() can safely skip setting them. Commit 5ec27ec735ba ("fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes.") added defaults for i_uid/i_gid when set_ownership() was not implemented. It also missed adjusting net_ctl_set_ownership() to use the same default values in case the computation of a better value failed.
Quoted source text, attributed separately from HOL analysis.