Linux Kernel Vulnerability in spi-nor Commands by Vendor Linux

CVE-2025-21793

Summary

A division by zero vulnerability in the Linux kernel has been identified in the spi-nor commands, particularly when the dummy cycle parameter is absent. In situations where both dummy bus cycle bytes and width are zero, this leads to potential CPU warnings. To address this issue, the kernel has been updated to return zero without executing any problematic calculations, effectively mitigating this division error risk.

References