# CVE-2025-40014: linux: In the Linux kernel, the following vulnerability has been resolved:  objtool, spi: amd: Fix out-of-bounds stack acces...

CVE-2025-40014 is fixed in 28 products on 1 platform, first by DEBIAN-CVE-2025-40014, released April 18, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-40014
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0024
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 18, 2025

## Description

In the Linux kernel, the following vulnerability has been resolved:  objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()  If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the entire amd_spi_freq array without breaking out early, causing 'i' to go beyond the array bounds.  Fix that by stopping the loop when it gets to the last entry, so the low speed_hz value gets clamped up to AMD_SPI_MIN_HZ.  Fixes the following warning with an UBSAN kernel:    drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-64kb sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 |
| Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 |
| Linux | kernel-azure sles 15.7 | 6.4.0-150700.20.6.1 | [SUSE-SU-2025:02254-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02254-1.md) | Jul 8, 2025 |
| Linux | kernel-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 |
| Linux | kernel-coco_debug sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 |
| Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-default sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-default sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.53.1.150600.12.24.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.53.1.150600.12.24.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-default-base sles 15.7 | 6.4.0-150700.53.6.1.150700.17.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-docs sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-livepatch-SLE15-SP6-RT_Update_11 sles 15.6 | 1-150600.1.3.2 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 |
| Linux | kernel-livepatch-SLE15-SP6_Update_12 sles 15.6 | 1-150600.13.3.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-livepatch-SLE15-SP7-RT_Update_2 sles 15.7 | 1-150700.1.5.1 | [SUSE-SU-2025:02333-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02333-1.md) | Jul 16, 2025 |
| Linux | kernel-livepatch-SLE15-SP7_Update_2 sles 15.7 | 1-150700.15.3.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-obs-build sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 |
| Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 |
| Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-source sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-source sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 |
| Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 |
| Linux | kernel-source-azure sles 15.7 | 6.4.0-150700.20.6.1 | [SUSE-SU-2025:02254-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02254-1.md) | Jul 8, 2025 |
| Linux | kernel-source-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 |
| Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 |
| Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-syms sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 |
| Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.40.1 | [SUSE-SU-2025:01965-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01965-1.md) | Jun 16, 2025 |
| Linux | kernel-syms-azure sles 15.7 | 6.4.0-150700.20.6.1 | [SUSE-SU-2025:02254-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02254-1.md) | Jul 8, 2025 |
| Linux | kernel-syms-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 |
| Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.39.1 | [SUSE-SU-2025:01964-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01964-1.md) | Jun 16, 2025 |
| Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.53.1 | [SUSE-SU-2025:02000-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02000-1.md) | Jun 18, 2025 |
| Linux | kernel-zfcpdump sles 15.7 | 6.4.0-150700.53.6.1 | [SUSE-SU-2025:02307-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02307-1.md) | Jul 14, 2025 |
| Linux | linux Debian 14 | 6.16.3-1 | [DEBIAN-CVE-2025-40014](https://patchblox.com/security/data/fix/linux/debian-cve-2025-40014.md) | Apr 18, 2025 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.