Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-42156

s390/pkey: Wipe copies of clear-key structures on failure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to < 382f94bb724b41a76030557a29bbffb965d4c0aeaffected
  • f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to < a891938947f4427f98cb1ce54f27223501efe750affected
  • f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to < 7f6243edd901b75aaece326c90a1cc0dcb60cc3daffected
  • f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d to < d65d76a44ffe74c73298ada25b0f578680576073affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.64 to ≤ 6.6.*unaffected
  • 6.9.9 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References