Riskcovery

CVE-2024-42156

s390/pkey: Wipe copies of clear-key structures on failure

State
Published
Severity
Not scored
Published
Jul 30, 2024
Updated
Oct 30, 2026
Reserved
Jul 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Wipe copies of clear-key structures on failure

Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before 382f94bb724b41a76030557a29bbffb965d4c0aeAffected
  • f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before a891938947f4427f98cb1ce54f27223501efe750Affected
  • f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before 7f6243edd901b75aaece326c90a1cc0dcb60cc3dAffected
  • f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to before d65d76a44ffe74c73298ada25b0f578680576073Affected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.