---
id: CVE-2024-47664
title: >-
  spi: hisi-kunpeng: Add verification for the max_frequency provided by the
  firmware
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  spi: hisi-kunpeng: Add verification for the max_frequency provided by the
  firmware


  If the value of max_speed_hz is 0, it may cause a division by zero

  error in hisi_cal…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c <
    dc30f8d9b25db3b79d36971a90c1ee95010ff45a
  - >-
    Linux >= c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c <
    16ccaf581da4fcf1e4d66086cf37263f9a656d43
  - >-
    Linux >= c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c <
    ee73a15d4a8ce8fb02d7866f7cf78fcdd16f0fcc
  - >-
    Linux >= c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c <
    5127c42c77de18651aa9e8e0a3ced190103b449c
  - Linux 5.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-10-10T13:22:13.073715Z'
published: '2024-10-09'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:19:28.681Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-47664'
references:
  - url: 'https://git.kernel.org/stable/c/dc30f8d9b25db3b79d36971a90c1ee95010ff45a'
  - url: 'https://git.kernel.org/stable/c/16ccaf581da4fcf1e4d66086cf37263f9a656d43'
  - url: 'https://git.kernel.org/stable/c/ee73a15d4a8ce8fb02d7866f7cf78fcdd16f0fcc'
  - url: 'https://git.kernel.org/stable/c/5127c42c77de18651aa9e8e0a3ced190103b449c'
tags:
  - cve.org
epss: 0.00206
epssPercentile: 0.10701
ingestedAt: '2026-11-03T13:45:42.696Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

If the value of max_speed_hz is 0, it may cause a division by zero
error in hisi_calc_effective_speed().
The value of max_speed_hz is provided by firmware.
Firmware is generally considered as a trusted domain. However, as
division by zero errors can cause system failure, for defense measure,
the value of max_speed is validated here. So 0 is regarded as invalid
and an error code is returned.

## Affected

- `Linux >= c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c < dc30f8d9b25db3b79d36971a90c1ee95010ff45a`
- `Linux >= c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c < 16ccaf581da4fcf1e4d66086cf37263f9a656d43`
- `Linux >= c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c < ee73a15d4a8ce8fb02d7866f7cf78fcdd16f0fcc`
- `Linux >= c770d8631e1810d8f1ce21b18ad5dd67eeb39e5c < 5127c42c77de18651aa9e8e0a3ced190103b449c`
- `Linux 5.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.