CVE-2025-22067

Summary

CVE-2025-22067 is a vulnerability affecting the Linux kernel. In the function cdns_mrvl_xspi_setup_clock(), an out-of-bounds array access issue was identified. If the requested clock frequency (requested_clk) was greater than 128, the function continued iterating through the cdns_mrvl_xspi_clk_div_list array without checking for array bounds, leading to an out-of-bounds access. This vulnerability resulted in an unexpected end of section warning during the compilation of the vmlinux.o file. The issue has been resolved by limiting the clock frequency to the minimum 6.25 MHz and stopping the loop at the last entry in the array.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.