In the Linux kernel, the following vulnerability has been resolved:
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the entire amd_spi_freq array without breaking out early, causing 'i' to go beyond the array bounds.
Fix that by stopping the loop when it gets to the last entry, so the low speed_hz value gets clamped up to AMD_SPI_MIN_HZ.
Fixes the following warning with an UBSAN kernel:
drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-debug-vdso | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-aws-64k | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub