CVE-2024-47663

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A division by zero issue was found in the Linux kernel's staging: iio: frequency: ad9834 section. The problem occurs when clk get rate() returns 0 in ad9834 write frequency(), leading to a division by zero in ad9834 calc freqreg(). The check if (fout > (clk freq / 2)) does not protect against this issue when fout is 0. The ad9834 write frequency() function is called from ad9834 write(), where fout is taken from a text buffer that can contain any value. The issue was discovered by the Linux Verification Center with SVACE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.