diff --git a/device.mk b/device.mk
index ef2e115f..3a27ccb9 100644
--- a/device.mk
+++ b/device.mk
@@ -26,8 +26,13 @@ AB_OTA_POSTINSTALL_CONFIG += \
 	FILESYSTEM_TYPE_system=ext4 \
 POSTINSTALL_OPTIONAL_system=true
 
+ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))
+# STOPSHIP (b/187105270) hack: temp freeze to a lower security patch
+VENDOR_SECURITY_PATCH = 2021-09-05
+else
 # Set Vendor SPL to match platform
 VENDOR_SECURITY_PATCH = $(PLATFORM_SECURITY_PATCH)
+endif
 
 # Set boot SPL
 BOOT_SECURITY_PATCH = $(PLATFORM_SECURITY_PATCH)