{"id":"CVE-2024-42158","title":"s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/pkey: Use kfree_sensitive() to fix Coccinelle warnings\n\nReplace memzero_explicit() and kfree() with kfree_sensitive() to fix\nwarnings reported by Coccinelle:\n\nWARN…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < f2e43af834fcc652b324384f14b561cf610742d4","Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 62151a0acde90823bdfa991d598c85cf4b1d387d","Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 22e6824622e8a8889df0f8fc4ed5aea0e702a694","Linux 4.11"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-10T16:15:02.030879Z"},"published":"2024-07-30","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:18:57.021Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-42158","references":[{"url":"https://git.kernel.org/stable/c/f2e43af834fcc652b324384f14b561cf610742d4"},{"url":"https://git.kernel.org/stable/c/62151a0acde90823bdfa991d598c85cf4b1d387d"},{"url":"https://git.kernel.org/stable/c/22e6824622e8a8889df0f8fc4ed5aea0e702a694"}],"tags":["cve.org"],"epss":0.00214,"epssPercentile":0.11788,"ingestedAt":"2026-11-03T13:45:42.683Z","slug":"CVE-2024-42158","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/pkey: Use kfree_sensitive() to fix Coccinelle warnings\n\nReplace memzero_explicit() and kfree() with kfree_sensitive() to fix\nwarnings reported by Coccinelle:\n\nWARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1506)\nWARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1643)\nWARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1770)\n\n## Affected\n\n- `Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < f2e43af834fcc652b324384f14b561cf610742d4`\n- `Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 62151a0acde90823bdfa991d598c85cf4b1d387d`\n- `Linux >= e80d4af0a320972aac58e2004d0ba4e44ef4c5c7 < 22e6824622e8a8889df0f8fc4ed5aea0e702a694`\n- `Linux 4.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}