{"id":"CVE-2024-42156","title":"s390/pkey: Wipe copies of clear-key structures on failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/pkey: Wipe copies of clear-key structures on failure\n\nWipe all sensitive data from stack for all IOCTLs, which convert a\nclear-key into a protected- or secure-key.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < 382f94bb724b41a76030557a29bbffb965d4c0ae","Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < a891938947f4427f98cb1ce54f27223501efe750","Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < 7f6243edd901b75aaece326c90a1cc0dcb60cc3d","Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < d65d76a44ffe74c73298ada25b0f578680576073","Linux 5.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-10T16:15:08.677401Z"},"published":"2024-07-30","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:18:55.967Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-42156","references":[{"url":"https://git.kernel.org/stable/c/382f94bb724b41a76030557a29bbffb965d4c0ae"},{"url":"https://git.kernel.org/stable/c/a891938947f4427f98cb1ce54f27223501efe750"},{"url":"https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d"},{"url":"https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073"}],"tags":["cve.org"],"epss":0.00212,"epssPercentile":0.11551,"ingestedAt":"2026-11-03T13:45:42.683Z","slug":"CVE-2024-42156","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/pkey: Wipe copies of clear-key structures on failure\n\nWipe all sensitive data from stack for all IOCTLs, which convert a\nclear-key into a protected- or secure-key.\n\n## Affected\n\n- `Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < 382f94bb724b41a76030557a29bbffb965d4c0ae`\n- `Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < a891938947f4427f98cb1ce54f27223501efe750`\n- `Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < 7f6243edd901b75aaece326c90a1cc0dcb60cc3d`\n- `Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < d65d76a44ffe74c73298ada25b0f578680576073`\n- `Linux 5.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}