{"id":"CVE-2025-39921","revision":"5e7b8fe21c794e3fa9c3d6018f3f5743","records":[{"revision":"5e7b8fe21c794e3fa9c3d6018f3f5743","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-39921","aliases":[],"title":"spi: microchip-core-qspi: stop checking viability of op->max_freq in supports_op callback","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: microchip-core-qspi: stop checking viability of op->max_freq in supports_op callback\n\nIn commit 13529647743d9 (\"spi: microchip-core-qspi: Support per spi-mem\noperation frequency switches\") the logic for checking the viability of\nop->max_freq in mchp_coreqspi_setup_clock() was copied into\nmchp_coreqspi_supports_op(). Unfortunately, op->max_freq is not valid\nwhen this function is called during probe but is instead zero.\nAccordingly, baud_rate_val is calculated to be INT_MAX due to division\nby zero, causing probe of the attached memory device to fail.\n\nSeemingly spi-microchip-core-qspi was the only driver that had such a\nmodification made to its supports_op callback when the per_op_freq\ncapability was added, so just remove it to restore prior functionality.","state":0,"publishedAt":"2025-10-01T07:55:16.54+00:00","modifiedAt":"2026-10-21T12:37:34.547+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/spi/spi-microchip-core-qspi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"d29f749d5202605dbb7480791e6841487d8afb77\",\n                            \"lessThan\": \"4ad071e3d57967f7ab483aed0687468bc1d9e9ce\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"13529647743d906ed3cf991f1d77727e7ff1fb6f\",\n                            \"lessThan\": \"ac8a13f35d5b8996582b3f97b924838a5c570c18\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"13529647743d906ed3cf991f1d77727e7ff1fb6f\",\n                            \"lessThan\": \"89e7353f522f5cf70cb48c01ce2dcdcb275b8022\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/spi/spi-microchip-core-qspi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.14\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.16.6\",\n                            \"lessThanOrEqual\": \"6.16.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/4ad071e3d57967f7ab483aed0687468bc1d9e9ce","https://git.kernel.org/stable/c/ac8a13f35d5b8996582b3f97b924838a5c570c18","https://git.kernel.org/stable/c/89e7353f522f5cf70cb48c01ce2dcdcb275b8022"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39921","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-39921","identifiers":["CVE-2025-39921"]},"retained":false,"historicalAffected":[]}],"coverage":[]}