CVE-2024-47664

Source
https://cve.org/CVERecord?id=CVE-2024-47664
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-47664.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-47664
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (3)
ROOT (2)
SUSE (11)
UBUNTU (1)
Related
Published
2024-10-09T14:13:57Z
Modified
2026-11-01T02:30:18Z
Summary
spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
Details

In the Linux kernel, the following vulnerability has been resolved:

spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

If the value of max_speed_hz is 0, it may cause a division by zero error in hisi_calc_effective_speed(). The value of max_speed_hz is provided by firmware. Firmware is generally considered as a trusted domain. However, as division by zero errors can cause system failure, for defense measure, the value of max_speed is validated here. So 0 is regarded as invalid and an error code is returned.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47664.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c
Fixed
dc30f8d9b25db3b79d36971a90c1ee95010ff45a
Fixed
16ccaf581da4fcf1e4d66086cf37263f9a656d43
Fixed
ee73a15d4a8ce8fb02d7866f7cf78fcdd16f0fcc
Fixed
5127c42c77de18651aa9e8e0a3ced190103b449c

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-47664.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.51
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-47664.json"