Riskcovery

CVE-2025-38081

spi-rockchip: Fix register out of bounds access

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
Oct 30, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi-rockchip: Fix register out of bounds access

Do not write native chip select stuff for GPIO chip selects. GPIOs can be numbered much higher than native CS. Also, it makes no sense.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc to before 7a27d8dd9354f00e823dfb557b690ea44b4a146fAffected
  • 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc to before 4a120221661fcecb253448d7b041a52d47f1d91fAffected
  • 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc to before ace57bd1fb49d193edec5f6a1f255f48dd5fca90Affected
  • 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc to before 254e04ec799c1ff8c1e2bd08a57c6a849895d6ffAffected
  • 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc to before 7a874e8b54ea21094f7fd2d428b164394c6cb316Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.93 through 6.6.*Not affected
  • 6.12.31 through 6.12.*Not affected
  • 6.14.9 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.