4.1
CVE-2024-42156
- EPSS 0.21%
- Veröffentlicht 30.07.2024 08:15:07
- Zuletzt bearbeitet 09.12.2024 13:10:02
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Unerledigt
s390/pkey: Wipe copies of clear-key structures on failure
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.11 < 6.9.9
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.115 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.1 | 0.5 | 3.6 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
|
https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d
https://git.kernel.org/stable/c/a891938947f4427f98cb1ce54f27223501efe750
https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073