CVE-2024-47663

staging: iio: frequency: ad9834: Validate frequency parameter value

published October 9, 2024

CVSS
—
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

staging: iio: frequency: ad9834: Validate frequency parameter value

In ad9834_write_frequency() clk_get_rate() can return 0. In such case

ad9834_calc_freqreg() call will lead to division by zero. Checking

'if (fout > (clk_freq / 2))' doesn't protect in case of 'fout' is 0.

ad9834_write_frequency() is called from ad9834_write(), where fout is

taken from text buffer, which can contain any value.

Modify parameters checking.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.1th percentile
Published
2024-10-09T14:13Z
EPSS history
Timeline
  • 09 OCT 14:13Z
    staging: iio: frequency: ad9834: Validate frequency parameter value
    cvelistv5