CVE-2024-50233

staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()

State: Published
Severity: 5.5 Medium
Published: Nov 9, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()

In the ad9832_write_frequency() function, clk_get_rate() might return 0. This can lead to a division by zero when calling ad9832_calc_freqreg(). The check if (fout > (clk_get_rate(st->mclk) / 2)) does not protect against the case when fout is 0. The ad9832_write_frequency() function is called from ad9832_write(), and fout is derived from a text buffer, which can contain any value.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-369 Divide By Zero

Affected Products

Product	Versions
LinuxLinux	ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before fcd6b59f7a774558e2525251c68aa37aff748e55Affected ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before 442f786c5bff8cfd756ebdeaa4aadbf05c22aa5aAffected ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before 2f39548f45693d86e950647012a214da6917dc9fAffected ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before ccbc10647aafe2b7506edb4b10e19c6c2416c162Affected ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before adfbc08b94e7df08b9ed5fa26b969cc1b54c84ecAffected ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before dd9e1cf619c945f320e686dcaf13e37ef0b05fddAffected ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before 6bd301819f8f69331a55ae2336c8b111fc933f3dAffected
LinuxLinux	2.6.39Affected before 2.6.39Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.171 through 5.15.Not affected 6.1.116 through 6.1.Not affected 6.6.60 through 6.6.Not affected 6.11.7 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before fcd6b59f7a774558e2525251c68aa37aff748e55Affected
ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before 442f786c5bff8cfd756ebdeaa4aadbf05c22aa5aAffected
ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before 2f39548f45693d86e950647012a214da6917dc9fAffected
ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before ccbc10647aafe2b7506edb4b10e19c6c2416c162Affected
ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before adfbc08b94e7df08b9ed5fa26b969cc1b54c84ecAffected
ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before dd9e1cf619c945f320e686dcaf13e37ef0b05fddAffected
ea707584bac187c9c6c64c4eacd1c09bcc08f37b to before 6bd301819f8f69331a55ae2336c8b111fc933f3dAffected

LinuxLinux

2.6.39Affected
before 2.6.39Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.171 through 5.15.*Not affected
6.1.116 through 6.1.*Not affected
6.6.60 through 6.6.*Not affected
6.11.7 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.