CVE-2025-38081
highIn the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds access Do not write native chip select stuff for…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds access Do not write native chip select stuff for GPIO chip selects. GPIOs can be numbered much higher than native CS. Also, it makes no sense.
CVSS
7.1
7.1 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2025-06-18 10:15
Modified: 2026-10-30 13:18
NVD status: Modified
Last synced 2 days ago
Verified against the source API 2026-10-30 13:38 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥5.14 <6.6.93, ≥6.7 <6.12.31, ≥6.13 <6.14.9
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/254e04ec799c1ff8c1e2bd08a57c6a849895d6ff
Patch / mitigation: https://git.kernel.org/stable/c/4a120221661fcecb253448d7b041a52d47f1d91f
Patch / mitigation: https://git.kernel.org/stable/c/7a874e8b54ea21094f7fd2d428b164394c6cb316
Patch / mitigation: https://git.kernel.org/stable/c/ace57bd1fb49d193edec5f6a1f255f48dd5fca90
References
- https://git.kernel.org/stable/c/254e04ec799c1ff8c1e2bd08a57c6a849895d6ff 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/4a120221661fcecb253448d7b041a52d47f1d91f 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/7a27d8dd9354f00e823dfb557b690ea44b4a146f 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/7a874e8b54ea21094f7fd2d428b164394c6cb316 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/ace57bd1fb49d193edec5f6a1f255f48dd5fca90 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-10-30 13:38 UTC · record ↗