CVE-2024-42158

MEDIUM4.1

s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings

Published Jul 30, 2024

Modified 8 months ago

Details

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings

Replace memzero_explicit() and kfree() with kfree_sensitive() to fix warnings reported by Coccinelle:

WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1506) WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1643) WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1770)

References

WEBhttps://git.kernel.org/stable/c/22e6824622e8a8889df0f8fc4ed5aea0e702a694 WEBhttps://git.kernel.org/stable/c/62151a0acde90823bdfa991d598c85cf4b1d387d ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2024-42158

CVSS Analysis

CVSS v3.1

4.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Ecosystems

Timeline

PublishedJul 30, 2024

ModifiedMay 4, 2025