Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42156
HistoryJul 30, 2024 - 7:46 a.m.

CVE-2024-42156 s390/pkey: Wipe copies of clear-key structures on failure

2024-07-3007:46:58
Linux
github.com
1
linux
kernel
s390/pkey
vulnerability
sensitive data

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Wipe copies of clear-key structures on failure

Wipe all sensitive data from stack for all IOCTLs, which convert a
clear-key into a protected- or secure-key.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-42156