What’s Vulnerable › Vulnerabilities

CVE-2025-21793: spi: sn-f-ospi: Fix division by zero

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-27 · updated 2026-06-17
• Weakness: CWE-369

Description

In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is no dummy cycle in the spi-nor commands, both dummy bus cycle bytes and width are zero. Because of the cpu's warning when divided by zero, the warning should be avoided. Return just zero to avoid such calculations.

Affected products

• Linux kernel: from 6.2 before 6.6.79; from 6.7 before 6.12.16; from 6.13 before 6.13.4; 6.14-rc1, 6.14-rc2 — fixed in 6.12.16, 6.13.4, 6.6.79

How to fix

Upgrade to a fixed version: Linux kernel 6.12.16, 6.13.4, 6.6.79. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3588b1c0fde2f58d166e3f94a5a58d64b893526c
• https://git.kernel.org/stable/c/4df6f005bef04a3dd16c028124a1b5684db3922b
• https://git.kernel.org/stable/c/7434135553bc03809a55803ee6a8dcaae6240d55
• https://git.kernel.org/stable/c/966328191b4c389c0f2159fa242915f51cbc1679

Get alerted when CVE-2025-21793 or the next vulnerability affects your stack