In the Linux kernel, the following vulnerability has been resolved:
crypto: starfive - Do not free stack buffer
RSA text data uses variable length buffer allocated in software stack.
Calling kfree on it causes undefined behaviour in subsequent operations.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Linux
Published: 2024-07-05T06:55:07.936Z
Updated: 2024-08-02T04:26:16.166Z
Reserved: 2024-06-25T14:23:23.746Z
Link: CVE-2024-39478
Vulnrichment
Updated: 2024-08-02T04:26:16.166Z
NVD
Status : Analyzed
Published: 2024-07-05T07:15:10.470
Modified: 2024-07-08T18:01:50.890
Link: CVE-2024-39478
Redhat