CVE-2024-56567

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56567
In the Linux kernel, the following vulnerability has been resolved: ad7780: fix division by zero in ad7780_write_raw() In the ad7780_write_raw() , val2 can be zero, which might lead to a division by zero error in DIV_ROUND_CLOSEST(). The ad7780_write_raw() is based on iio_info's write_raw. While val is explicitly declared that can be zero (in read mode), val2 is not specified to be non-zero.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/022e13518ba6cc1b4fdd291f49e4f57b2d5718e0 Patch
https://git.kernel.org/stable/c/18fb33df1de83a014d7f784089f9b124facc157f Patch
https://git.kernel.org/stable/c/68e79b848196a0b0ec006009cc69da1f835d1ae8 Patch
https://git.kernel.org/stable/c/7e3a8ea3d1ada7f707de5d9d504774b4191eab66 Patch
https://git.kernel.org/stable/c/afc1e3c00b3f5f0b4f1bc3e974fb9803cb938a90 Patch
https://git.kernel.org/stable/c/c174b53e95adf2eece2afc56cd9798374919f99a Patch
https://git.kernel.org/stable/c/f25a9f1df1f6738acf1fa05595fb6060a2c08ff1 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Jan 2025, 15:47

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/022e13518ba6cc1b4fdd291f49e4f57b2d5718e0 - () https://git.kernel.org/stable/c/022e13518ba6cc1b4fdd291f49e4f57b2d5718e0 - Patch
References () https://git.kernel.org/stable/c/18fb33df1de83a014d7f784089f9b124facc157f - () https://git.kernel.org/stable/c/18fb33df1de83a014d7f784089f9b124facc157f - Patch
References () https://git.kernel.org/stable/c/68e79b848196a0b0ec006009cc69da1f835d1ae8 - () https://git.kernel.org/stable/c/68e79b848196a0b0ec006009cc69da1f835d1ae8 - Patch
References () https://git.kernel.org/stable/c/7e3a8ea3d1ada7f707de5d9d504774b4191eab66 - () https://git.kernel.org/stable/c/7e3a8ea3d1ada7f707de5d9d504774b4191eab66 - Patch
References () https://git.kernel.org/stable/c/afc1e3c00b3f5f0b4f1bc3e974fb9803cb938a90 - () https://git.kernel.org/stable/c/afc1e3c00b3f5f0b4f1bc3e974fb9803cb938a90 - Patch
References () https://git.kernel.org/stable/c/c174b53e95adf2eece2afc56cd9798374919f99a - () https://git.kernel.org/stable/c/c174b53e95adf2eece2afc56cd9798374919f99a - Patch
References () https://git.kernel.org/stable/c/f25a9f1df1f6738acf1fa05595fb6060a2c08ff1 - () https://git.kernel.org/stable/c/f25a9f1df1f6738acf1fa05595fb6060a2c08ff1 - Patch
CWE CWE-369
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ad7780: se corrige la división por cero en ad7780_write_raw() En ad7780_write_raw(), val2 puede ser cero, lo que podría provocar un error de división por cero en DIV_ROUND_CLOSEST(). ad7780_write_raw() se basa en write_raw de iio_info. Si bien se declara explícitamente que val puede ser cero (en modo de lectura), no se especifica que val2 sea distinto de cero.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-01-14 15:47

NVD link : CVE-2024-56567

Mitre link : CVE-2024-56567

CVE.ORG link : CVE-2024-56567

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-369

Divide By Zero