Answer in brief
CVE-2024-47664 records a Medium severity (CVSS 5.5) vulnerability in spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c <dc30f8d9b25db3b79d36971a90c1ee95010ff45a || >=c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c <16ccaf581da4fcf1e4d66086cf37263f9a656d43 || >=c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c <ee73a15d4a8ce8fb02d7866f7cf78fcdd16f0fcc || >=c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c <5127c42c77de18651aa9e8e0a3ced190103b449c | dc30f8d9b25db3b79d36971a90c1ee95010ff45a, 16ccaf581da4fcf1e4d66086cf37263f9a656d43, ee73a15d4a8ce8fb02d7866f7cf78fcdd16f0fcc, 5127c42c77de18651aa9e8e0a3ced190103b449c |
| Linux/Linuxgeneric | 5.13 | Not reported |
Published upstream
Oct 9, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 30, 2026
In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware If the value of max_speed_hz is 0, it may cause a division by zero error in hisi_calc_effective_speed(). The value of max_speed_hz is provided by firmware. Firmware is generally considered as a trusted domain. However, as division by zero errors can cause system failure, for defense measure, the value of max_speed is validated here. So 0 is regarded as invalid and an error code is returned.
Quoted source text, attributed separately from HOL analysis.