Vulnerability in Linux
CVE-2025-21793
In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is no dummy cycle in the spi-nor commands, both dummy bus cycle bytes and width are zero. Because of the cpu's warning when divided by zero, the warning should be avoided. Return just zero to avoid such calculations.
EPSS: 0.002 (12.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 1b74dd64c8612619e399e5a31da79a3636914495, 6.2, 0
- Linux Linux_kernel — versions 6.14
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-21793?
- CVE-2025-21793 is a medium-severity vulnerability in Linux, classified under Divide By Zero. CVSS score: 5.5/10. Published 2025-02-27.
- How severe is CVE-2025-21793?
- Medium severity. CVSS v3 base score is 5.5 out of 10.