CVE-2024-42155

LOW
INFO Priority: 0.00 BB Relevance: 14/100
Published: 2024-07-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

No Interaction

CVSS Vector Breakdown

AV: Local
AC: High
PR: High
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or secure-keys from stack, even in case of an error.

Affected Software (6)

VendorProductVersion
Linux Linux e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 016dbf1a1ae1d13fca8589f884a296854c1756db
Linux Linux e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 7d5711e03cefd59da4d198ca02d4f8238ba1105c
Linux Linux e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < c746f7ced4ad88ee48d0b6c92710e4674403185b
Linux Linux e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < f2ebdadd85af4f4d0cae1e5d009c70eccc78c207
Linux Linux 4.11
linux linux_kernel 4.11 – 6.9.9

Bug Bounty Relevance

14 / 100
✓ No user interaction

CVSS Score

1.9 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.26%
Raw Score 0.002590
Percentile 17.6%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00259
2026-10-31
0.00259
2026-10-30
0.00259
2026-10-29
0.00259

Intelligence Sources

mitre ref →
nvd ref →