NetSight
medium5.5

CVE-2024-50233

In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() In the ad983…

Impact

In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() In the ad9832_write_frequency() function, clk_get_rate() might return 0. This can lead to a division by zero when calling ad9832_calc_freqreg(). The check if (fout > (clk_get_rate(st->mclk) / 2)) does not protect against the case when fout is 0. The ad9832_write_frequency() function is called from ad9832_write(), and fout is derived from a text buffer, which can contain any value.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.39 before 5.4.285
from 5.5 before 5.10.229
from 5.11 before 5.15.171
from 5.16 before 6.1.116
from 6.2 before 6.6.60
from 6.7 before 6.11.7

Weakness classification

References