In the Linux kernel, the following vulnerability has been resolved:
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the entire amd_spi_freq array without breaking out early, causing 'i' to go beyond the array bounds.
Fix that by stopping the loop when it gets to the last entry, so the low speed_hz value gets clamped up to AMD_SPI_MIN_HZ.
Fixes the following warning with an UBSAN kernel:
drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-64kb-extraUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-azureUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade reiserfs-kmp-azure | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64k | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub