In the Linux kernel, the following vulnerability has been resolved:
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the entire amd_spi_freq array without breaking out early, causing 'i' to go beyond the array bounds.
Fix that by stopping the loop when it gets to the last entry, so the low speed_hz value gets clamped up to AMD_SPI_MIN_HZ.
Fixes the following warning with an UBSAN kernel:
drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-appleUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-debugUpgrade dtb-lg | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1007-aws | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub