CVE-2024-39478

Publication date

2024-07-05 06:55:07

Family

Linux

State

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.