Vulnerability in Linux

CVE-2025-21793

In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is no dummy cycle in the spi-nor commands, both dummy bus cycle bytes and width are zero. Because of the cpu's warning when divided by zero, the warning should be avoided. Return just zero to avoid such calculations.

EPSS: 0.002 (12.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2025-21793?
CVE-2025-21793 is a medium-severity vulnerability in Linux, classified under Divide By Zero. CVSS score: 5.5/10. Published 2025-02-27.
How severe is CVE-2025-21793?
Medium severity. CVSS v3 base score is 5.5 out of 10.