Security Advisory

CVE-2024-39478

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-07-05 06:55:07
Last updated 2026-08-05 11:33:31
Assigner Linux
CVSS score not scored
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.