{"id":"CVE-2024-47663","state":"PUBLISHED","title":"staging: iio: frequency: ad9834: Validate frequency parameter value","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: iio: frequency: ad9834: Validate frequency parameter value\n\nIn ad9834_write_frequency() clk_get_rate() can return 0. In such case\nad9834_calc_freqreg() call will lead to division by zero. Checking\n'if (fout > (clk_freq / 2))' doesn't protect in case of 'fout' is 0.\nad9834_write_frequency() is called from ad9834_write(), where fout is\ntaken from text buffer, which can contain any value.\n\nModify parameters checking.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.","publishedAt":"2024-10-09T14:13:56.514Z","updatedAt":"2026-05-11T20:38:22.251Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"5edc3a45ef428501000a7b23d0e1777a548907f6","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"0e727707a239d5c519fc9abc2f0fd913516a7e47","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"41cc91e3138fe52f8da92a81bebcd0e6cf488c53","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"d8b09a5edc4a634373158c1a405491de3c52e58a","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"3ba9abfcaa9e16bb91ed7e0e2b42e94a157a953e","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"dc12e49f970b08d8b007b8981b97e2eb93c0e89d","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"8961b245e8f92bccbaacfbbdf69eba60e3e7c227","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"b48aa991758999d4e8f9296c5bbe388f293ef465","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/staging/iio/frequency/ad9834.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.38","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.38","versionType":"semver"},{"version":"4.19.323","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.284","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.226","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.167","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.110","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.51","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.10.10","status":"unaffected","lessThanOrEqual":"6.10.*","versionType":"semver"},{"version":"6.11","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/staging/iio/frequency/ad9834.c"]}],"references":["https://git.kernel.org/stable/c/5edc3a45ef428501000a7b23d0e1777a548907f6","https://git.kernel.org/stable/c/0e727707a239d5c519fc9abc2f0fd913516a7e47","https://git.kernel.org/stable/c/41cc91e3138fe52f8da92a81bebcd0e6cf488c53","https://git.kernel.org/stable/c/d8b09a5edc4a634373158c1a405491de3c52e58a","https://git.kernel.org/stable/c/3ba9abfcaa9e16bb91ed7e0e2b42e94a157a953e","https://git.kernel.org/stable/c/dc12e49f970b08d8b007b8981b97e2eb93c0e89d","https://git.kernel.org/stable/c/8961b245e8f92bccbaacfbbdf69eba60e3e7c227","https://git.kernel.org/stable/c/b48aa991758999d4e8f9296c5bbe388f293ef465","https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"],"weaknesses":[],"ingestedAt":"2026-10-29T20:07:56.516Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/47xxx/CVE-2024-47663.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-47663","state":"PUBLISHED","datePublished":"2024-10-09T14:13:56.514Z","dateUpdated":"2026-05-11T20:38:22.251Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-09-30T16:00:12.935Z"},"containers":{"cna":{"title":"staging: iio: frequency: ad9834: Validate frequency parameter value","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: iio: frequency: ad9834: Validate frequency parameter value\n\nIn ad9834_write_frequency() clk_get_rate() can return 0. In such case\nad9834_calc_freqreg() call will lead to division by zero. Checking\n'if (fout > (clk_freq / 2))' doesn't protect in case of 'fout' is 0.\nad9834_write_frequency() is called from ad9834_write(), where fout is\ntaken from text buffer, which can contain any value.\n\nModify parameters checking.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"5edc3a45ef428501000a7b23d0e1777a548907f6","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"0e727707a239d5c519fc9abc2f0fd913516a7e47","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"41cc91e3138fe52f8da92a81bebcd0e6cf488c53","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"d8b09a5edc4a634373158c1a405491de3c52e58a","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"3ba9abfcaa9e16bb91ed7e0e2b42e94a157a953e","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"dc12e49f970b08d8b007b8981b97e2eb93c0e89d","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"8961b245e8f92bccbaacfbbdf69eba60e3e7c227","versionType":"git"},{"version":"12b9d5bf76bfa20d3207ef24fca9c8254a586a58","status":"affected","lessThan":"b48aa991758999d4e8f9296c5bbe388f293ef465","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/staging/iio/frequency/ad9834.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.38","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.38","versionType":"semver"},{"version":"4.19.323","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.284","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.226","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.167","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.110","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.51","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.10.10","status":"unaffected","lessThanOrEqual":"6.10.*","versionType":"semver"},{"version":"6.11","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/staging/iio/frequency/ad9834.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/5edc3a45ef428501000a7b23d0e1777a548907f6"},{"url":"https://git.kernel.org/stable/c/0e727707a239d5c519fc9abc2f0fd913516a7e47"},{"url":"https://git.kernel.org/stable/c/41cc91e3138fe52f8da92a81bebcd0e6cf488c53"},{"url":"https://git.kernel.org/stable/c/d8b09a5edc4a634373158c1a405491de3c52e58a"},{"url":"https://git.kernel.org/stable/c/3ba9abfcaa9e16bb91ed7e0e2b42e94a157a953e"},{"url":"https://git.kernel.org/stable/c/dc12e49f970b08d8b007b8981b97e2eb93c0e89d"},{"url":"https://git.kernel.org/stable/c/8961b245e8f92bccbaacfbbdf69eba60e3e7c227"},{"url":"https://git.kernel.org/stable/c/b48aa991758999d4e8f9296c5bbe388f293ef465"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T20:38:22.251Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.38","versionEndExcluding":"4.19.323"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.38","versionEndExcluding":"5.4.284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.38","versionEndExcluding":"5.10.226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.38","versionEndExcluding":"5.15.167"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.38","versionEndExcluding":"6.1.110"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.38","versionEndExcluding":"6.6.51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.38","versionEndExcluding":"6.10.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.38","versionEndExcluding":"6.11"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-10T13:22:28.473649Z","id":"CVE-2024-47663","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-10T13:22:42.368Z"}},{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T22:20:26.126Z"}}]}}}