CVE-2026-10679

CVE-2026-10679 affects Zephyr’s DesignWare SPI driver (drivers/spi/spi_dw.c). The bug arises when the BAUDR divider is computed as info->clock_frequency / config->frequency without validating frequency, allowing a user-space configured frequency of 0. The spi_transceive syscall path copies ...