Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-42155

s390/pkey: Wipe copies of protected- and secure-keys

Description

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or secure-keys from stack, even in case of an error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 to < 016dbf1a1ae1d13fca8589f884a296854c1756dbaffected
  • e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 to < 7d5711e03cefd59da4d198ca02d4f8238ba1105caffected
  • e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 to < c746f7ced4ad88ee48d0b6c92710e4674403185baffected
  • e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 to < f2ebdadd85af4f4d0cae1e5d009c70eccc78c207affected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.9.9 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References