Riskcovery

CVE-2024-42155

s390/pkey: Wipe copies of protected- and secure-keys

State
Published
Severity
Not scored
Published
Jul 30, 2024
Updated
Oct 30, 2026
Reserved
Jul 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Wipe copies of protected- and secure-keys

Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or secure-keys from stack, even in case of an error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 to before 016dbf1a1ae1d13fca8589f884a296854c1756dbAffected
  • e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 to before 7d5711e03cefd59da4d198ca02d4f8238ba1105cAffected
  • e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 to before c746f7ced4ad88ee48d0b6c92710e4674403185bAffected
  • e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 to before f2ebdadd85af4f4d0cae1e5d009c70eccc78c207Affected
LinuxLinux
  • 4.11Affected
  • before 4.11Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.