CVE-2024-42155

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or secure-keys from stack, even in case of an error.

CVSS 3.1

1.9CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-25)

Published

2024-07-30

Modified

2026-10-21

Record from

the NVD, synced 2026-10-22

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/7d5711e03cefd59da4d198ca02d4f8238ba1105c
• https://git.kernel.org/stable/c/c746f7ced4ad88ee48d0b6c92710e4674403185b
• https://git.kernel.org/stable/c/f2ebdadd85af4f4d0cae1e5d009c70eccc78c207
• https://git.kernel.org/stable/c/c746f7ced4ad88ee48d0b6c92710e4674403185b
• https://git.kernel.org/stable/c/f2ebdadd85af4f4d0cae1e5d009c70eccc78c207

Check your stackJSON