CVE-2024-42158

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 18/100
Published: 2024-07-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: High
UI: None
S: Unchanged
C: High
I: None
A: None

Description

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings Replace memzero_explicit() and kfree() with kfree_sensitive() to fix warnings reported by Coccinelle: WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1506) WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1643) WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1770)

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
Linux Linux e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < f2e43af834fcc652b324384f14b561cf610742d4
Linux Linux e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 62151a0acde90823bdfa991d598c85cf4b1d387d
Linux Linux e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 22e6824622e8a8889df0f8fc4ed5aea0e702a694
Linux Linux 4.11
linux linux_kernel 4.11 – 6.9.9

Bug Bounty Relevance

18 / 100
✓ No user interaction

CVSS Score

4.1 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.21%
Raw Score 0.002140
Percentile 11.7%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00214
2026-10-31
0.00214
2026-10-30
0.00187
2026-10-29
0.00187

Intelligence Sources

mitre ref →
nvd ref →