THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2024-39478 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

[NVD] CVE-2024-39478 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

lownvdPublished 2024-07-05

CVE-2024-39478 CVSS: 7.8 HIGH Published: 2024-07-05T07:15:10.470

In the Linux kernel, the following vulnerability has been resolved:

crypto: starfive - Do not free stack buffer

RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-39478