CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Use kfreesensitive() to fix Coccinelle warnings
Replace memzeroexplicit() and kfree() with kfreesensitive() to fix warnings reported by Coccinelle:
WARNING opportunity for kfreesensitive/kvfreesensitive (line 1506) WARNING opportunity for kfreesensitive/kvfreesensitive (line 1643) WARNING opportunity for kfreesensitive/kvfreesensitive (line 1770)
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42158?
CVE-2024-42158 is classified as a low-severity vulnerability in the Linux kernel.
How do I fix CVE-2024-42158?
To address CVE-2024-42158, upgrade to Linux kernel version 6.12.12-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-42158?
CVE-2024-42158 affects Linux kernel versions from 4.11 up to 6.9.9.
Is CVE-2024-42158 related to memory management in the kernel?
Yes, CVE-2024-42158 involves issues concerning memory management functions and their warnings.
What is the fix implemented in CVE-2024-42158?
The fix for CVE-2024-42158 involves replacing memzero_explicit() and kfree() with kfree_sensitive() to resolve warnings.