NVD Vulnerability Detail

CVE-2024-50205

Summary	In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The observed behavior was introduced by commit 826b5de90c0b ("ALSA: firewire-lib: fix insufficient PCM rule for period/buffer size"), and it is difficult to show that any of the interval parameters will satisfy the snd_interval_test() condition with data from the amdtp_rate_table[] table. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Publication Date	Nov. 8, 2024, 3:15 p.m.
Registration Date	Nov. 9, 2024, 5 a.m.
Last Update	Nov. 14, 2024, 2 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/7d4eb9e22131ec154e638cbd56629195c9bcbe9a	Patch
2	https://git.kernel.org/stable/c/d2826873db70a6719cdd9212a6739f3e6234cfc4	Patch
3	https://git.kernel.org/stable/c/4bdc21506f12b2d432b1f2667e5ff4c75eee58e3	Patch
4	https://git.kernel.org/stable/c/3452d39c4704aa12504e4190298c721fb01083c3	Patch
5	https://git.kernel.org/stable/c/72cafe63b35d06b5cfbaf807e90ae657907858da	Patch
6	https://git.kernel.org/stable/c/d575414361630b8b0523912532fcd7c79e43468c	Patch
7	https://git.kernel.org/stable/c/5e431f85c87bbffd93a9830d5a576586f9855291	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-369	ゼロ除算	https://cwe.mitre.org/data/definitions/369.html

JVN Vulnerability Information

Linux の Linux Kernel におけるゼロ除算に関する脆弱性

Title	Linux の Linux Kernel におけるゼロ除算に関する脆弱性
Summary	Linux の Linux Kernel には、ゼロ除算に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 21, 2024, midnight
Registration Date	Nov. 14, 2024, 1:09 p.m.
Last Update	Nov. 14, 2024, 1:09 p.m.

Affected System

Linux

Linux Kernel 4.20 以上 5.4.285 未満

Linux Kernel 5.11 以上 5.15.170 未満

Linux Kernel 5.16 以上 6.1.115 未満

Linux Kernel 5.5 以上 5.10.229 未満

Linux Kernel 6.12

Linux Kernel 6.2 以上 6.6.59 未満

Linux Kernel 6.7 以上 6.11.6 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50205	https://www.cve.org/CVERecord?id=CVE-2024-50205
National Vulnerability Database (NVD)
2	CVE-2024-50205	https://nvd.nist.gov/vuln/detail/CVE-2024-50205

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-369	https://cwe.mitre.org/data/definitions/369.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (3452d39)	https://git.kernel.org/stable/c/3452d39c4704aa12504e4190298c721fb01083c3
2	ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (4bdc215)	https://git.kernel.org/stable/c/4bdc21506f12b2d432b1f2667e5ff4c75eee58e3
3	ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (5e431f8)	https://git.kernel.org/stable/c/5e431f85c87bbffd93a9830d5a576586f9855291
4	ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (72cafe6)	https://git.kernel.org/stable/c/72cafe63b35d06b5cfbaf807e90ae657907858da
5	ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (7d4eb9e)	https://git.kernel.org/stable/c/7d4eb9e22131ec154e638cbd56629195c9bcbe9a
6	ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (d282687)	https://git.kernel.org/stable/c/d2826873db70a6719cdd9212a6739f3e6234cfc4
7	ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (d575414)	https://git.kernel.org/stable/c/d575414361630b8b0523912532fcd7c79e43468c
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年11月14日] 掲載	Nov. 14, 2024, 12:06 p.m.