ACK: [SRU][N][PATCH 0/1] CVE-2024-50233

[Magali Lemes]

On 21/01/2025 15:59, Massimiliano Pellizzer wrote:
> [Impact]
> 
> staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
> 
> In the ad9832_write_frequency() function, clk_get_rate() might return 0.
> This can lead to a division by zero when calling ad9832_calc_freqreg().
> The check if (fout > (clk_get_rate(st->mclk) / 2)) does not protect
> against the case when fout is 0. The ad9832_write_frequency() function
> is called from ad9832_write(), and fout is derived from a text buffer,
> which can contain any value.
> 
> [Fix]
> 
> Oracular: Fixed via upstrem stable updates (96ddadd61f3c24)
> Noble: Clean cherry pick from mainline
> Jammy: Fixed via upstream stable updates (d2fddb830e0acc)
> Focal: Fixed via upstream stable updates (86908c27f9a164)
> Bionic: Sent to ESM ML
> Xenial: Sent to ESM ML
> Trusty: Sent to ESM ML
> 
> [Test Case]
> 
> Compile tested only.
> 
> [Where problems could occur]
> 
> The fix affects the AD9832 driver in the Industrial I/O subsystem. An
> issue with this fix may lead to kernel crashes, incorrect frequency or
> phase output from the AD9832 device, or failures in signal generation.
> 
> Zicheng Qu (1):
>    staging: iio: frequency: ad9832: fix division by zero in
>      ad9832_calc_freqreg()
> 
>   drivers/staging/iio/frequency/ad9832.c | 7 +++++--
>   1 file changed, 5 insertions(+), 2 deletions(-)
> 

Acked-by: Magali Lemes <magali.lemes at canonical.com>