Riskcovery

CVE-2024-47664

spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

State
Published
Severity
Not scored
Published
Oct 9, 2024
Updated
Oct 30, 2026
Reserved
Sep 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

If the value of max_speed_hz is 0, it may cause a division by zero error in hisi_calc_effective_speed(). The value of max_speed_hz is provided by firmware. Firmware is generally considered as a trusted domain. However, as division by zero errors can cause system failure, for defense measure, the value of max_speed is validated here. So 0 is regarded as invalid and an error code is returned.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c to before dc30f8d9b25db3b79d36971a90c1ee95010ff45aAffected
  • c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c to before 16ccaf581da4fcf1e4d66086cf37263f9a656d43Affected
  • c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c to before ee73a15d4a8ce8fb02d7866f7cf78fcdd16f0fccAffected
  • c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c to before 5127c42c77de18651aa9e8e0a3ced190103b449cAffected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.