CVE-2024-42158

medium

Description

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings Replace memzero_explicit() and kfree() with kfree_sensitive() to fix warnings reported by Coccinelle: WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1506) WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1643) WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 1770)

References

https://git.kernel.org/stable/c/62151a0acde90823bdfa991d598c85cf4b1d387d

https://git.kernel.org/stable/c/22e6824622e8a8889df0f8fc4ed5aea0e702a694

Details

Source: Mitre, NVD

Published: 2024-07-30

Updated: 2024-08-02

Risk Information

CVSS v2

Base Score: 3.7

Vector: CVSS2#AV:L/AC:H/Au:M/C:C/I:N/A:N

Severity: Low

CVSS v3

Base Score: 4.1

Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Severity: Medium