CVE-2024-47664

Summary

CVE-2024-47664 is a vulnerability affecting the Linux kernel. In certain configurations, the spi driver for Hisilicon Kunpeng processors fails to verify the max_frequency value provided by the firmware. If the value of max_speed_hz is zero, it may lead to a division by zero error in hisi_calc_effective_speed(). Although firmware is typically considered a trusted domain, the potential for system failure due to such errors necessitates validation of max_speed_hz. Consequently, an error code is now returned when max_speed_hz equals zero to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.