CVE-2024-50233
MEDIUM EPSS 17.9%
Published Nov 9, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Published Nov 9, 2024 1y ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() In the ad9832_write_frequency() function, clk_get_rate() might return 0. This can lead to a division by zero when calling ad9832_calc_freqreg(). The check if (fout > (clk_get_rate(st->mclk) / 2)) does not protect against the case when fout is 0. The ad9832_write_frequency() function is called from ad9832_write(), and fout is derived from a text buffer, which can contain any value.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
17.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-369
Affected Products 11
| Vendor | Product | Version | Range |
|---|---|---|---|
| linux | linux_kernel | * | ≥2.6.39 – <5.4.285 |
| linux | linux_kernel | * | ≥5.5 – <5.10.229 |
| linux | linux_kernel | * | ≥5.11 – <5.15.171 |
| linux | linux_kernel | * | ≥5.16 – <6.1.116 |
| linux | linux_kernel | * | ≥6.2 – <6.6.60 |
| linux | linux_kernel | * | ≥6.7 – <6.11.7 |
| linux | linux_kernel | 6.12 | any |
| linux | linux_kernel | 6.12 | any |
| linux | linux_kernel | 6.12 | any |
| linux | linux_kernel | 6.12 | any |
| linux | linux_kernel | 6.12 | any |
References 9
- git.kernel.org https://git.kernel.org/stable/c/2f39548f45693d86e950647012a214da6917dc9f
- git.kernel.org https://git.kernel.org/stable/c/442f786c5bff8cfd756ebdeaa4aadbf05c22aa5a
- git.kernel.org https://git.kernel.org/stable/c/6bd301819f8f69331a55ae2336c8b111fc933f3d
- git.kernel.org https://git.kernel.org/stable/c/adfbc08b94e7df08b9ed5fa26b969cc1b54c84ec
- git.kernel.org https://git.kernel.org/stable/c/ccbc10647aafe2b7506edb4b10e19c6c2416c162
- git.kernel.org https://git.kernel.org/stable/c/dd9e1cf619c945f320e686dcaf13e37ef0b05fdd
- git.kernel.org https://git.kernel.org/stable/c/fcd6b59f7a774558e2525251c68aa37aff748e55
- lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Remediation
- git.kernel.org https://git.kernel.org/stable/c/2f39548f45693d86e950647012a214da6917dc9f
- git.kernel.org https://git.kernel.org/stable/c/442f786c5bff8cfd756ebdeaa4aadbf05c22aa5a
- git.kernel.org https://git.kernel.org/stable/c/6bd301819f8f69331a55ae2336c8b111fc933f3d
- git.kernel.org https://git.kernel.org/stable/c/adfbc08b94e7df08b9ed5fa26b969cc1b54c84ec
- git.kernel.org https://git.kernel.org/stable/c/ccbc10647aafe2b7506edb4b10e19c6c2416c162
- git.kernel.org https://git.kernel.org/stable/c/dd9e1cf619c945f320e686dcaf13e37ef0b05fdd
- git.kernel.org https://git.kernel.org/stable/c/fcd6b59f7a774558e2525251c68aa37aff748e55