In the Linux kernel, the following vulnerability has been resolved:
crypto: starfive - Do not free stack buffer
RSA text data uses variable length buffer allocated in software stack.
Calling kfree on it causes undefined behaviour in subsequent operations.
Metrics
Affected Vendors & Products
References
History
Wed, 06 Nov 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: Linux
Published: 2024-07-05T06:55:07.936Z
Updated: 2024-12-19T09:06:57.282Z
Reserved: 2024-06-25T14:23:23.746Z
Link: CVE-2024-39478
Vulnrichment
Updated: 2024-08-02T04:26:16.166Z
NVD
Status : Modified
Published: 2024-07-05T07:15:10.470
Modified: 2024-11-21T09:27:45.170
Link: CVE-2024-39478
Redhat