---
id: CVE-2025-38081
title: 'spi-rockchip: Fix register out of bounds access'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  spi-rockchip: Fix register out of bounds access

  Do not write native chip select stuff for GPIO chip selects.
  GPIOs can be numbered much higher than native CS.
  Also, it…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc <
    7a27d8dd9354f00e823dfb557b690ea44b4a146f
  - >-
    Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc <
    4a120221661fcecb253448d7b041a52d47f1d91f
  - >-
    Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc <
    ace57bd1fb49d193edec5f6a1f255f48dd5fca90
  - >-
    Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc <
    254e04ec799c1ff8c1e2bd08a57c6a849895d6ff
  - >-
    Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc <
    7a874e8b54ea21094f7fd2d428b164394c6cb316
  - Linux 5.14
published: '2025-06-18'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:21:40.233Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38081'
references:
  - url: 'https://git.kernel.org/stable/c/7a27d8dd9354f00e823dfb557b690ea44b4a146f'
  - url: 'https://git.kernel.org/stable/c/4a120221661fcecb253448d7b041a52d47f1d91f'
  - url: 'https://git.kernel.org/stable/c/ace57bd1fb49d193edec5f6a1f255f48dd5fca90'
  - url: 'https://git.kernel.org/stable/c/254e04ec799c1ff8c1e2bd08a57c6a849895d6ff'
  - url: 'https://git.kernel.org/stable/c/7a874e8b54ea21094f7fd2d428b164394c6cb316'
tags:
  - cve.org
epss: 0.00181
epssPercentile: 0.07674
ingestedAt: '2026-11-03T17:50:48.368Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

spi-rockchip: Fix register out of bounds access

Do not write native chip select stuff for GPIO chip selects.
GPIOs can be numbered much higher than native CS.
Also, it makes no sense.

## Affected

- `Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < 7a27d8dd9354f00e823dfb557b690ea44b4a146f`
- `Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < 4a120221661fcecb253448d7b041a52d47f1d91f`
- `Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < ace57bd1fb49d193edec5f6a1f255f48dd5fca90`
- `Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < 254e04ec799c1ff8c1e2bd08a57c6a849895d6ff`
- `Linux >= 736b81e075172f1e6cd7a8bc1a1374a2dee9e4dc < 7a874e8b54ea21094f7fd2d428b164394c6cb316`
- `Linux 5.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.