← Database

CVE-2024-39478

HIGH CVSS: 7.8 Published: 2024-07-05 Modified: 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-770

References