Yüksek CVSS 7.1
CVE-2025-38081: Linux Kernel: sınır dışı okuma
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds access Do not write native chip select stuff for GPIO chip selects. GPIOs can be numbered much higher than native CS. Also, it makes no sense.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - EPSS
- %0,18 (yüzdelik 8)
- CWE
- CWE-125
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 5.14 | — | 6.6.93 |
| linux-linux-kernel | 6.7 | — | 6.12.31 |
| linux-linux-kernel | 6.13 | — | 6.14.9 |