Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2025-38081: Linux kernel SPI driver may write beyond memory
CVE-2025-38081 · published 1 year ago
Summary
The SPI driver for Rockchip devices in the Linux kernel could write data to invalid memory locations when handling certain GPIO chip selects. This can cause system instability or crashes on systems using Debian, Ubuntu, or cloud images based on these kernels. Apply the latest kernel updates from your Linux distribution to fix the issue.
What to do
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update debian rootio-linux to version 6.1.164-1.root.io.108.
- Update canonical linux-gcp-6.14 to version 6.14.0-1016.17~24.04.1.
- Update canonical linux-gke to version 6.8.0-1043.48.
- Update canonical linux-gkeop to version 6.8.0-1030.33.
- Update canonical linux-ibm to version 6.8.0-1044.44.
- Update canonical linux-lowlatency to version 6.8.0-100.100.1.
- Update canonical linux-nvidia to version 6.8.0-1046.49.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1046.49.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
- Update canonical linux-oem-6.14 to version 6.14.0-1012.12.
- Update canonical linux-aws-6.8 to version 6.8.0-1046.49~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1047.50~22.04.2.
- Update canonical linux-hwe-6.8 to version 6.8.0-100.100~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1044.44~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-100.100.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1046.49~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1043.44~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-100.100~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1041.42~22.04.1.
- Update canonical linux to version 6.8.0-100.100.
- Update canonical linux-aws to version 6.8.0-1046.49.
- Update canonical linux-aws-6.14 to version 6.14.0-1013.13~24.04.1.
- Update canonical linux-azure to version 6.8.0-1046.52.
- Update canonical linux-azure-nvidia-6.14 to version 6.14.0-1007.7.
- Update canonical linux-gcp to version 6.8.0-1047.50.
- Update canonical linux-oracle to version 6.8.0-1043.44.
- Update canonical linux-oracle-6.14 to version 6.14.0-1013.13~24.04.1.
- Update canonical linux-raspi to version 6.8.0-1047.51.
- Update canonical linux-riscv-6.14 to version 6.14.0-32.32.1~24.04.1.
- Update canonical linux-xilinx to version 6.8.0-1023.24.
- Update canonical linux-aws-fips to version 6.8.0-1046.49+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1046.52+fips1.
- Update canonical linux-fips to version 6.8.0-100.100+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1047.50+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2037.38.
- Update canonical linux-realtime to version 6.8.1-1041.42.
- Update canonical linux-realtime-6.14 to version 6.14.0-1012.12~24.04.1.
- Update canonical linux to version 6.8.0-138.138.aikido.86.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.86.
- Update canonical linux-bluefield to version 6.8.0-1016.20.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1046.53~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1046.53.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux kernel to version 6.14.9.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update debian linux to version 6.12.32-1.
- Update bellsoft linux-lts to version 6.1.191-r0.
- Update bellsoft linux-lts to version 6.12.41-r0.
- Update bellsoft linux-lts to version 6.18.35-r1.
- Update linux linux to version 7a27d8dd9354f00e823dfb557b690ea44b4a146f or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 < 6.1.164-1.root.io.108 Fix: upgrade to 6.1.159-1.root.io.75
|
| – | linux | linux_kernel |
>= 5.14, < 6.6.93 >= 6.7, < 6.12.31 >= 6.13, < 6.14.9 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 |
< 6.14.0-1016.17~24.04.1 Fix: upgrade to 6.14.0-1016.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1043.48 Fix: upgrade to 6.8.0-1043.48
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1030.33 Fix: upgrade to 6.8.0-1030.33
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1044.44 Fix: upgrade to 6.8.0-1044.44
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-100.100.1 Fix: upgrade to 6.8.0-100.100.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1046.49 Fix: upgrade to 6.8.0-1046.49
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1046.49.1 Fix: upgrade to 6.8.0-1046.49.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1020.20 Fix: upgrade to 6.8.0-1020.20
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 |
< 6.14.0-1012.12 Fix: upgrade to 6.14.0-1012.12
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
Showing 50 of 241. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1046.49~22.04.1 Fix: upgrade to 6.8.0-1046.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1051.57~22.04.1 Fix: upgrade to 6.8.0-1051.57~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1046.53~22.04.1 Fix: upgrade to 6.8.0-1046.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1047.50~22.04.2 Fix: upgrade to 6.8.0-1047.50~22.04.2
|
| Ubuntu:22.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-100.100~22.04.1 Fix: upgrade to 6.8.0-100.100~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1044.44~22.04.1 Fix: upgrade to 6.8.0-1044.44~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg | All versions |
| Ubuntu:22.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-100.100.1~22.04.1 Fix: upgrade to 6.8.0-100.100.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1046.49~22.04.1 Fix: upgrade to 6.8.0-1046.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1043.44~22.04.1 Fix: upgrade to 6.8.0-1043.44~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-100.100~22.04.1 Fix: upgrade to 6.8.0-100.100~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1041.42~22.04.1 Fix: upgrade to 6.8.1-1041.42~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-100.100 Fix: upgrade to 6.8.0-100.100
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1046.49 Fix: upgrade to 6.8.0-1046.49
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 |
< 6.14.0-1013.13~24.04.1 Fix: upgrade to 6.14.0-1013.13~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1046.52 Fix: upgrade to 6.8.0-1046.52
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1046.53 Fix: upgrade to 6.8.0-1046.53
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 |
< 6.14.0-1007.7 Fix: upgrade to 6.14.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1047.50 Fix: upgrade to 6.8.0-1047.50
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1043.44 Fix: upgrade to 6.8.0-1043.44
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 |
< 6.14.0-1013.13~24.04.1 Fix: upgrade to 6.14.0-1013.13~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1047.51 Fix: upgrade to 6.8.0-1047.51
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 |
< 6.14.0-32.32.1~24.04.1 Fix: upgrade to 6.14.0-32.32.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1023.24 Fix: upgrade to 6.8.0-1023.24
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1046.49+fips1 Fix: upgrade to 6.8.0-1046.49+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1046.52+fips1 Fix: upgrade to 6.8.0-1046.52+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-100.100+fips1 Fix: upgrade to 6.8.0-100.100+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1047.50+fips1 Fix: upgrade to 6.8.0-1047.50+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2037.38 Fix: upgrade to 6.8.0-2037.38
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1041.42 Fix: upgrade to 6.8.1-1041.42
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 |
< 6.14.0-1012.12~24.04.1 Fix: upgrade to 6.14.0-1012.12~24.04.1
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1016.20 Fix: upgrade to 6.8.0-1016.20
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Linux | linux | kernel |
>= 6.13.0, < 6.14.9 Fix: upgrade to 6.14.9
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| – | linux | linux |
< 7a27d8dd9354f00e823dfb557b690ea44b4a146f 5.14 |
| Debian:12 | debian | linux | All versions |
| Debian:13 | debian | linux |
< 6.12.32-1 Fix: upgrade to 6.12.32-1
|
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.189-r0, < 6.1.191-r0 Fix: upgrade to 6.1.191-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.6.89-r0, < 6.12.41-r0 Fix: upgrade to 6.12.41-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.92-r1, < 6.18.35-r1 Fix: upgrade to 6.18.35-r1
|
Original advisory text
BELL-CVE-2025-38081
In the Linux kernel, the following vulnerability has been resolved:
spi-rockchip: Fix register out of bounds access
Do not write native chip select stuff for GPIO chip selects.
GPIOs can be numbered much higher than native CS.
Also, it makes no sense.
spi-rockchip: Fix register out of bounds access
Do not write native chip select stuff for GPIO chip selects.
GPIOs can be numbered much higher than native CS.
Also, it makes no sense.
References
- https://git.kernel.org/stable/c/4a120221661fcecb253448d7b041a52d47f1d91f URL
- https://git.kernel.org/stable/c/ace57bd1fb49d193edec5f6a1f255f48dd5fca90 URL
- https://ubuntu.com/security/notices/USN-8028-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8052-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8074-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8074-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8126-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-38081 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-38081 Third Party Advisory
- https://git.kernel.org/stable/c/254e04ec799c1ff8c1e2bd08a57c6a849895d6ff URL
- https://git.kernel.org/stable/c/7a27d8dd9354f00e823dfb557b690ea44b4a146f URL
- https://git.kernel.org/stable/c/7a874e8b54ea21094f7fd2d428b164394c6cb316 URL
- https://git.kernel.org/linus/7a874e8b54ea21094f7fd2d428b164394c6cb316 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7769-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7770-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7771-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7769-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7769-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7789-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7789-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8052-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-8 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38081... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-38081 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://security-tracker.debian.org/tracker/CVE-2025-38081 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2025-38081 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-125Out-of-bounds Read
Timeline
Published21 Jun 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-38081 · NVD
UBUNTU-CVE-2025-38081 · OSV
CVE-2025-38081 · OSV
CVE-2025-38081 · MITRE
DEBIAN-CVE-2025-38081 · OSV
BELL-CVE-2025-38081 · OSV
Track software like this
Free during beta