In the Linux kernel, the following vulnerability has been resolved:
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the entire amd_spi_freq array without breaking out early, causing 'i' to go beyond the array bounds.
Fix that by stopping the loop when it gets to the last entry, so the low speed_hz value gets clamped up to AMD_SPI_MIN_HZ.
Fixes the following warning with an UBSAN kernel:
drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade kernel-develUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-apmUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-rt_debug | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-realtimeUpgrade linux-image-oracle | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub