CVE-2024-50233

Summary

CVE-2024-50233 is a newly identified vulnerability affecting the Linux kernel. In specific instances, the 'ad9832' driver's 'ad9832_calc_freqreg()' function is susceptible to a division by zero error. This issue arises when 'clk_get_rate()' returns a value of zero in the 'ad9832_write_frequency()' function. The absence of a protective check against zero values in the division operation leads to this vulnerability. The 'ad9832_write_frequency()' function is invoked from 'ad9832_write(),' and 'fout,' a value derived from a text buffer, may contain any value, exacerbating the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.