Bug 1227440 (CVE-2024-39478)

Summary:	VUL-0: CVE-2024-39478: kernel: crypto: starfive - Do not free stack buffer
Product:	[Novell Products] SUSE Security Incidents	Reporter:	SMASH SMASH <smash_bz>
Component:	Incidents	Assignee:	Security Team bot <security-team>
Status:	RESOLVED INVALID	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P3 - Medium	CC:	andrea.mattiazzo, jlee
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/412886/
Whiteboard:
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description SMASH SMASH 2024-07-05 09:57:34 UTC

In the Linux kernel, the following vulnerability has been resolved:

crypto: starfive - Do not free stack buffer

RSA text data uses variable length buffer allocated in software stack.
Calling kfree on it causes undefined behaviour in subsequent operations.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-39478
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-39478.mbox
https://git.kernel.org/stable/c/5944de192663f272033501dcd322b008fca72006
https://git.kernel.org/stable/c/d7f01649f4eaf1878472d3d3f480ae1e50d98f6c
https://www.cve.org/CVERecord?id=CVE-2024-39478

Comment 4 Andrea Mattiazzo 2024-07-16 11:51:22 UTC

Closing since no branch are affected, nothing to do.