What’s Vulnerable › Vulnerabilities

CVE-2024-56567: ad7780: fix division by zero in ad7780_write_raw()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-27 · updated 2026-06-17
• Weakness: CWE-369

Description

In the Linux kernel, the following vulnerability has been resolved: ad7780: fix division by zero in ad7780_write_raw() In the ad7780_write_raw() , val2 can be zero, which might lead to a division by zero error in DIV_ROUND_CLOSEST(). The ad7780_write_raw() is based on iio_info's write_raw. While val is explicitly declared that can be zero (in read mode), val2 is not specified to be non-zero.

Affected products

• Linux kernel: from 5.2 before 5.4.287; from 5.5 before 5.10.231; from 5.11 before 5.15.174; from 5.16 before 6.1.120; from 6.2 before 6.6.64; from 6.7 before 6.12.4 — fixed in 5.10.231, 5.15.174, 5.4.287, 6.1.120, 6.12.4, 6.6.64

How to fix

Upgrade to a fixed version: Linux kernel 5.10.231, 5.15.174, 5.4.287, 6.1.120. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/022e13518ba6cc1b4fdd291f49e4f57b2d5718e0
• https://git.kernel.org/stable/c/18fb33df1de83a014d7f784089f9b124facc157f
• https://git.kernel.org/stable/c/68e79b848196a0b0ec006009cc69da1f835d1ae8
• https://git.kernel.org/stable/c/7e3a8ea3d1ada7f707de5d9d504774b4191eab66
• https://git.kernel.org/stable/c/afc1e3c00b3f5f0b4f1bc3e974fb9803cb938a90
• https://git.kernel.org/stable/c/c174b53e95adf2eece2afc56cd9798374919f99a
• https://git.kernel.org/stable/c/f25a9f1df1f6738acf1fa05595fb6060a2c08ff1
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
• https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Get alerted when CVE-2024-56567 or the next vulnerability affects your stack