CVE-2024-56567
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 14, 2025
CWE ID 369
Summary
CVE-2024-56567 is a newly identified vulnerability affecting the Linux kernel. In the ad7780_write_raw() function, a division by zero error can occur due to the potential for val2 being equal to zero. This issue is significant because val2 is not explicitly declared as non-zero, increasing the likelihood of this situation arising. The function in question is based on iio_info's write_raw, and the division error can manifest in DIV_ROUND_CLOSEST(). This vulnerability has been addressed in recent Linux kernel updates.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.