CVE-2024-47663

MEDIUM

Linux Kernel up to 6.10.10 - Divide By Zero in ad9834_write_frequency

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834_write_frequency() clk_get_rate() can return 0. In such case ad9834_calc_freqreg() call will lead to division by zero. Checking 'if (fout > (clk_freq / 2))' doesn't protect in case of 'fout' is 0. ad9834_write_frequency() is called from ad9834_write(), where fout is taken from text buffer, which can contain any value. Modify parameters checking. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS v3 5.5
EPSS 0.0021
EPSS Percentile 11.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-369
Status published
Products (27)
linux/Kernel 2.6.38 - 4.19.323linux
linux/Kernel 4.20.0 - 5.4.284linux
linux/Kernel 5.11.0 - 5.15.167linux
linux/Kernel 5.16.0 - 6.1.110linux
linux/Kernel 5.5.0 - 5.10.226linux
linux/Kernel 6.2.0 - 6.6.51linux
linux/Kernel 6.7.0 - 6.10.10linux
Linux/Linux < 2.6.38
Linux/Linux 12b9d5bf76bfa20d3207ef24fca9c8254a586a58 - 0e727707a239d5c519fc9abc2f0fd913516a7e47
Linux/Linux 12b9d5bf76bfa20d3207ef24fca9c8254a586a58 - 3ba9abfcaa9e16bb91ed7e0e2b42e94a157a953e
... and 17 more
Published Oct 09, 2024
Tracked Since Feb 18, 2026