A subtle memory-management bug in the Linux kernel's StarFive crypto driver has been tracked as CVE-2024-39478 and fixed upstream — the flaw arises when code calls kfree on a variable-length buffer that was allocated on the stack, producing undefined behavior that can crash or destabilize...