Security Advisory

CVE-2024-39478

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-05 06:55:07
Last updated 2026-05-11 20:21:19
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.