Out of Bounds Access Vulnerability in Linux Kernel's SPI-Rockchip Driver

CVE-2025-38081

What is CVE-2025-38081?

An out of bounds access vulnerability was identified in the SPI-Rockchip driver within the Linux kernel. This issue arises when handling GPIO chip selects, as the driver does not account for the possibility that GPIO numbers could exceed the range of native chip select lines. As a result, improper handling may lead to unintended consequences, including potential system instability or malfunction. It is essential to implement corrections to ensure that the driver properly manages GPIO identifiers and prevents out of bounds access.

References