CVE-2024-42124: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Make qedf_execute_tmf() non-preemptible Stop calling smp_processor_id() from preemptible code in qedf_execute_tmf90. This results in BUG_ON() when running an RT kernel. [ 659.343280] BUG: using smp_processor_id() in preemptible [00000000] code: sg_reset/3646 [ 659.343282] caller is qedf_execute_tmf+0x8b/0x360 [qedf]

Affected products

• Linux Linux Kernel: from 4.11, before 5.4.280 (fixed in 5.4.280); from 5.5, before 5.10.222 (fixed in 5.10.222); from 5.11, before 5.15.163 (fixed in 5.15.163); from 5.16, before 6.1.98 (fixed in 6.1.98); from 6.2, before 6.6.39 (fixed in 6.6.39); from 6.7, before 6.9.9 (fixed in 6.9.9)

Published 2024-07-30. Last modified 2026-06-17.