medium4.1
CVE-2024-42156
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stac…
Impact
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 4.11 before 6.9.9 |
References
- NVD record
- CVE.org record
- https://git.kernel.org/stable/c/382f94bb724b41a76030557a29bbffb965d4c0ae
- https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d
- https://git.kernel.org/stable/c/a891938947f4427f98cb1ce54f27223501efe750
- https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073