cve 2024 42075

CVE-2024-42075 is a Linux kernel vulnerability in the BPF arena subsystem that was patched in July 2024. The bug is a memory-safety issue that can lead to a use-after-free condition when memory regions backed by the BPF arena are remapped. The fix introduces a reference counter to track multiple mmap/mremap events and prevents unsafe memory freeing in arena_vm_close. This is considered an availability-first kernel bug with a limited but real exploitation surface. Administrators are advised to update affected kernels promptly. The tag covers discussions and technical details about the vulnerability, its patch, and mitigation steps for Linux systems.