Dashboard / CVE-2024-42156

CVE-2024-42156

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 18/100
Published: 2024-07-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: High
UI: None
S: Unchanged
C: High
I: None
A: None

Description

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key.

Affected Software (6)

VendorProductVersion
Linux Linux f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < 382f94bb724b41a76030557a29bbffb965d4c0ae
Linux Linux f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < a891938947f4427f98cb1ce54f27223501efe750
Linux Linux f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < 7f6243edd901b75aaece326c90a1cc0dcb60cc3d
Linux Linux f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < d65d76a44ffe74c73298ada25b0f578680576073
Linux Linux 5.4
linux linux_kernel 4.11 – 6.9.9

References & Advisories (4)

Bug Bounty Relevance

18 / 100
✓ No user interaction

CVSS Score

4.1 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.21%
Raw Score 0.002120
Percentile 11.5%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00212
2026-10-31
0.00212
2026-10-30
0.00212
2026-10-29
0.00212

Intelligence Sources

mitre ref →
nvd ref →

External Links