CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
In the Linux kernel, the following vulnerability has been resolved:
spi: hisi-kunpeng: Add verification for the maxfrequency provided by the firmware
If the value of maxspeedhz is 0, it may cause a division by zero error in hisicalceffectivespeed(). The value of maxspeedhz is provided by firmware. Firmware is generally considered as a trusted domain. However, as division by zero errors can cause system failure, for defense measure, the value of maxspeed is validated here. So 0 is regarded as invalid and an error code is returned.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47664?
CVE-2024-47664 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-47664?
To fix CVE-2024-47664, update to the latest patched version of the Linux kernel as specified in the mitigation notes.
What systems are affected by CVE-2024-47664?
CVE-2024-47664 affects multiple versions of the Linux kernel including specific ranges such as versions up to 6.6.51 and between 6.7 and 6.10.10.
What are the potential impacts of CVE-2024-47664?
The potential impact of CVE-2024-47664 includes a division by zero error that could lead to system instability or crashes.
Is there a recommended version to upgrade to for CVE-2024-47664?
The recommended versions to upgrade to for mitigating CVE-2024-47664 include versions 5.10.223-1, 5.10.226-1, and 6.12.11-1.