CVE-2024-42156

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42156
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key.

4.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d Patch
https://git.kernel.org/stable/c/a891938947f4427f98cb1ce54f27223501efe750
https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073 Patch
https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d Patch
https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Dec 2024, 13:10

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/a891938947f4427f98cb1ce54f27223501efe750 -

21 Nov 2024, 09:33

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d - Patch () https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d - Patch
References () https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073 - Patch () https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073 - Patch

02 Aug 2024, 14:31

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.1
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d - () https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d - Patch
References () https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073 - () https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073 - Patch

30 Jul 2024, 13:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: s390/pkey: borra copias de estructuras de claves claras en caso de fallo. Borra todos los datos confidenciales de la pila para todos los IOCTL, que convierten una clave clara en una clave protegida o segura.

30 Jul 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-30 08:15

Updated : 2024-12-09 13:10

NVD link : CVE-2024-42156

Mitre link : CVE-2024-42156

CVE.ORG link : CVE-2024-42156

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other