GHSA-6q7m-pj7q-7w8f

GHSA-6q7m-pj7q-7w8f PUBLISHED CVSS 7.099999904632568 HIGH

Record from GitHub Advisory Database · Published June 18, 2025

In the Linux kernel, the following vulnerability has been resolved: spi-rockchip: Fix register out of bounds access Do not write native chip select stuff for GPIO chip selects. GPIOs can be numbered much higher than native CS. Also, it makes no sense.

Risk scores

CVSS 3.1

7.099999904632568

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Timeline

Jun 18, 2025 CVE Published
Apr 10, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-6q7m-pj7q-7w8f
vulnetix vdb fixes GHSA-6q7m-pj7q-7w8f

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-6q7m-pj7q-7w8f/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://git.kernel.org/stable/c/ace57bd1fb49d193edec5f6a1f255f48dd5fca90 url
https://git.kernel.org/stable/c/7a874e8b54ea21094f7fd2d428b164394c6cb316 url
https://nvd.nist.gov/vuln/detail/CVE-2025-38081 advisory
https://git.kernel.org/stable/c/254e04ec799c1ff8c1e2bd08a57c6a849895d6ff url
https://git.kernel.org/stable/c/4a120221661fcecb253448d7b041a52d47f1d91f url

Look up in the Resolve Platform →