Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H H H 7.8 .0087 56.0 —
AFFECTED Product Versions Fixed Linux 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 – — Linux 4.8 – 4.19.320
TIMELINE Jul 30 Reserved by Linux Aug 17 Published (CNA: Linux) Aug 4 RESCORED — CVE-2024-42285 (Linux). CVSS 9.8 → 7.8 (NVD).
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows: conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler; rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.
| Date | Event | Detail |
|---|---|---|
| July 30, 2024 | Reserved | Reserved by Linux |
| August 17, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-42285 (Linux). CVSS 9.8 → 7.8 (NVD). |
Authoritative record: CVE-2024-42285 at cve.org
Vendors: linux
Weaknesses: CWE-416
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-42285 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.