VULNERABILITY INTELLIGENCE

CVE-2024-39478

CVSS score7.8 HIGH

EPSS probability0.22%

CISA KEVNot currently listed

Published2024-07-05

Last modified2026-09-02

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.