CVE-2025-21793

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21793

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is no dummy cycle in the spi-nor commands, both dummy bus cycle bytes and width are zero. Because of the cpu's warning when divided by zero, the warning should be avoided. Return just zero to avoid such calculations.

References
Link Resource
https://git.kernel.org/stable/c/3588b1c0fde2f58d166e3f94a5a58d64b893526c Patch
https://git.kernel.org/stable/c/4df6f005bef04a3dd16c028124a1b5684db3922b Patch
https://git.kernel.org/stable/c/7434135553bc03809a55803ee6a8dcaae6240d55 Patch
https://git.kernel.org/stable/c/966328191b4c389c0f2159fa242915f51cbc1679 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
History

05 Mar 2025, 14:57

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: spi: sn-f-ospi: Corrige la división por cero Cuando no hay un ciclo ficticio en los comandos spi-nor, tanto los bytes del ciclo de bus ficticio como el ancho son cero. Debido a la advertencia de la CPU cuando se divide por cero, se debe evitar la advertencia. Devuelve solo cero para evitar dichos cálculos.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/3588b1c0fde2f58d166e3f94a5a58d64b893526c - () https://git.kernel.org/stable/c/3588b1c0fde2f58d166e3f94a5a58d64b893526c - Patch
References () https://git.kernel.org/stable/c/4df6f005bef04a3dd16c028124a1b5684db3922b - () https://git.kernel.org/stable/c/4df6f005bef04a3dd16c028124a1b5684db3922b - Patch
References () https://git.kernel.org/stable/c/7434135553bc03809a55803ee6a8dcaae6240d55 - () https://git.kernel.org/stable/c/7434135553bc03809a55803ee6a8dcaae6240d55 - Patch
References () https://git.kernel.org/stable/c/966328191b4c389c0f2159fa242915f51cbc1679 - () https://git.kernel.org/stable/c/966328191b4c389c0f2159fa242915f51cbc1679 - Patch
CWE CWE-369
First Time Linux
Linux linux Kernel

27 Feb 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-27 03:15

Updated : 2025-10-01 20:18

NVD link : CVE-2025-21793

Mitre link : CVE-2025-21793

CVE.ORG link : CVE-2025-21793

JSON object : View

Products Affected

linux

CWE
CWE-369

Divide By Zero