CVE-2024-47664
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware If the value of max_speed_hz is 0, it may cause a division by zero error in hisi_calc_effective_speed(). The value of max_speed_hz is provided by firmware. Firmware is generally considered as a trusted domain. However, as division by zero errors can cause system failure, for defense measure, the value of max_speed is validated here. So 0 is regarded as invalid and an error code is returned.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedOct 9, 2024
First seenOct 9, 2024
How to fix
Update
- linux linux_kernel6.6.51, 6.10.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | v < 6.6.51, 6.7 ≤ v < 6.10.10, 6.11 | 6.6.51, 6.10.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.