Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-39478

crypto: starfive - Do not free stack buffer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 445a4aaf5842073e4130b1d6dbe3785284d9615f to < bfd861dadd3a45de257b3d328bf49b64a6f9c5f1affected
  • 445a4aaf5842073e4130b1d6dbe3785284d9615f to < 5944de192663f272033501dcd322b008fca72006affected
  • 445a4aaf5842073e4130b1d6dbe3785284d9615f to < d7f01649f4eaf1878472d3d3f480ae1e50d98f6caffected

Linux Linux

Default version status: affected

  • 6.5affected
  • 0 to < 6.5unaffected
  • 6.6.156 to ≤ 6.6.*unaffected
  • 6.9.5 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References