CVE-2024-50205

ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()

State: Published
Severity: 5.5 Medium
Published: Nov 8, 2024
Updated: Oct 15, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()

The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division.

The observed behavior was introduced by commit 826b5de90c0b ("ALSA: firewire-lib: fix insufficient PCM rule for period/buffer size"), and it is difficult to show that any of the interval parameters will satisfy the snd_interval_test() condition with data from the amdtp_rate_table[] table.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-369 Divide By Zero

Affected Products

Product	Versions
LinuxLinux	826b5de90c0bca4e9de6231da9e1730480621588 to before d575414361630b8b0523912532fcd7c79e43468cAffected 826b5de90c0bca4e9de6231da9e1730480621588 to before 5e431f85c87bbffd93a9830d5a576586f9855291Affected 826b5de90c0bca4e9de6231da9e1730480621588 to before 7d4eb9e22131ec154e638cbd56629195c9bcbe9aAffected 826b5de90c0bca4e9de6231da9e1730480621588 to before d2826873db70a6719cdd9212a6739f3e6234cfc4Affected 826b5de90c0bca4e9de6231da9e1730480621588 to before 4bdc21506f12b2d432b1f2667e5ff4c75eee58e3Affected 826b5de90c0bca4e9de6231da9e1730480621588 to before 3452d39c4704aa12504e4190298c721fb01083c3Affected 826b5de90c0bca4e9de6231da9e1730480621588 to before 72cafe63b35d06b5cfbaf807e90ae657907858daAffected
LinuxLinux	4.20Affected before 4.20Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.170 through 5.15.Not affected 6.1.115 through 6.1.Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

826b5de90c0bca4e9de6231da9e1730480621588 to before d575414361630b8b0523912532fcd7c79e43468cAffected
826b5de90c0bca4e9de6231da9e1730480621588 to before 5e431f85c87bbffd93a9830d5a576586f9855291Affected
826b5de90c0bca4e9de6231da9e1730480621588 to before 7d4eb9e22131ec154e638cbd56629195c9bcbe9aAffected
826b5de90c0bca4e9de6231da9e1730480621588 to before d2826873db70a6719cdd9212a6739f3e6234cfc4Affected
826b5de90c0bca4e9de6231da9e1730480621588 to before 4bdc21506f12b2d432b1f2667e5ff4c75eee58e3Affected
826b5de90c0bca4e9de6231da9e1730480621588 to before 3452d39c4704aa12504e4190298c721fb01083c3Affected
826b5de90c0bca4e9de6231da9e1730480621588 to before 72cafe63b35d06b5cfbaf807e90ae657907858daAffected

LinuxLinux

4.20Affected
before 4.20Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.170 through 5.15.*Not affected
6.1.115 through 6.1.*Not affected
6.6.59 through 6.6.*Not affected
6.11.6 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.