In the Linux kernel, the following vulnerability has been resolved:
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the entire amd_spi_freq array without breaking out early, causing 'i' to go beyond the array bounds.
Fix that by stopping the loop when it gets to the last entry, so the low speed_hz value gets clamped up to AMD_SPI_MIN_HZ.
Fixes the following warning with an UBSAN kernel:
drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade kernel-rt_debugUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade dtb-appleUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dtb-amazonUpgrade gfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-armUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-macros | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-aws-64k | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub