CVE-2024-27021: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devm_led_classdev_register() to the netdev is problematic because on module removal we get a RTNL-related deadlock. Fix this by avoiding the device-managed LED functions. Note: We can safely call led_classdev_unregister() for a LED even if registering it failed, because led_classdev_unregister() detects this and is a no-op in this case.

Affected products

• Fedoraproject Fedora: version 38 only; version 39 only; version 40 only
• Linux Linux Kernel: from 6.8, before 6.8.8 (fixed in 6.8.8); version 6.9 only

Published 2024-05-01. Last modified 2026-06-17.