{"id":"CVE-2024-42155","title":"s390/pkey: Wipe copies of protected- and secure-keys","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/pkey: Wipe copies of protected- and secure-keys\n\nAlthough the clear-key of neither protected- nor secure-keys is\naccessible, this key material should only be visib…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 7d5711e03cefd59da4d198ca02d4f8238ba1105c","Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < c746f7ced4ad88ee48d0b6c92710e4674403185b","Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < f2ebdadd85af4f4d0cae1e5d009c70eccc78c207","Linux 4.11"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-10T16:15:11.881394Z"},"published":"2024-07-30","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:35:03.443Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-42155","references":[{"url":"https://git.kernel.org/stable/c/7d5711e03cefd59da4d198ca02d4f8238ba1105c"},{"url":"https://git.kernel.org/stable/c/c746f7ced4ad88ee48d0b6c92710e4674403185b"},{"url":"https://git.kernel.org/stable/c/f2ebdadd85af4f4d0cae1e5d009c70eccc78c207"}],"tags":["cve.org"],"epss":0.00259,"epssPercentile":0.17453,"ingestedAt":"2026-10-21T12:48:53.734Z","slug":"CVE-2024-42155","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/pkey: Wipe copies of protected- and secure-keys\n\nAlthough the clear-key of neither protected- nor secure-keys is\naccessible, this key material should only be visible to the calling\nprocess. So wipe all copies of protected- or secure-keys from stack,\neven in case of an error.\n\n## Affected\n\n- `Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 7d5711e03cefd59da4d198ca02d4f8238ba1105c`\n- `Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < c746f7ced4ad88ee48d0b6c92710e4674403185b`\n- `Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < f2ebdadd85af4f4d0cae1e5d009c70eccc78c207`\n- `Linux 4.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}