CVE-2025-37896 is a medium severity vulnerability in the Linux kernel's SPI memory driver. It involves a divide error caused by calculating operation duration when dummy bytes are zero, such as in certain Winbond SPINAND flash memory devices. This flaw leads to a kernel oops (crash) due to a divide error in spi_mem_calc_op_duration(). The issue has been fixed by skipping the calculation when dummy bytes are zero.