CVE-2025-38081

HIGH
MEDIUM Priority: 0.01 BB Relevance: 39/100
Published: 2025-06-18 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds access Do not write native chip select stuff for GPIO chip selects. GPIOs can be numbered much higher than native CS. Also, it makes no sense.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
Linux Linux 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < 7a27d8dd9354f00e823dfb557b690ea44b4a146f
Linux Linux 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < 4a120221661fcecb253448d7b041a52d47f1d91f
Linux Linux 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < ace57bd1fb49d193edec5f6a1f255f48dd5fca90
Linux Linux 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < 254e04ec799c1ff8c1e2bd08a57c6a849895d6ff
Linux Linux 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < 7a874e8b54ea21094f7fd2d428b164394c6cb316
Linux Linux 5.14
linux linux_kernel 5.14 – 6.6.93

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS — Exploitation Probability

0.18%
Raw Score 0.001820
Percentile 7.8%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00182
2026-10-29
0.00182

Intelligence Sources

mitre ref →
nvd ref →