CVE-2024-42229

crypto: aead,cipher - zeroize key buffer after use

published July 30, 2024

CVSS
—
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: aead,cipher - zeroize key buffer after use

I.G 9.7.B for FIPS 140-3 specifies that variables temporarily holding

cryptographic information should be zeroized once they are no longer

needed. Accomplish this by using kfree_sensitive for buffers that

previously held the private key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Published
2024-07-30T07:47Z
EPSS history
Timeline
  • 30 JUL 07:47Z
    crypto: aead,cipher - zeroize key buffer after use
    cvelistv5