Linux Kernel Microchip QSPI Driver Operation Frequency Viability Check Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Microchip QSPI driver has been addressed. The issue arose because the driver improperly handled the maximum frequency parameter during its operation support checks, leading to a failure when probing attached memory devices. This vulnerability was introduced when the driver was modified to support per-operation frequency adjustments, but the maximum frequency value was not valid at the time of the probe, causing a division by zero error. As a result, the driver failed to correctly initialize the memory device.

Impact

The vulnerability caused the probing of attached memory devices to fail, disrupting normal device initialization and potentially leading to broader system functionality issues.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Oct 1, 2025, 8:24 AM
Updated: Oct 1, 2025, 8:24 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
7.7
relevance
0.6
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.