CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: iris: fix module removal if firmware download failed<br /> <br /> Fix remove if firmware failed to load:<br /> qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33_p4.mbn failed with error -2<br /> qcom-iris aa00000.video-codec: firmware download failed<br /> qcom-iris aa00000.video-codec: core init failed<br /> <br /> then:<br /> $ echo aa00000.video-codec &gt; /sys/bus/platform/drivers/qcom-iris/unbind<br /> <br /> Triggers:<br /> genpd genpd:1:aa00000.video-codec: Runtime PM usage count underflow!<br /> ------------[ cut here ]------------<br /> video_cc_mvs0_clk already disabled<br /> WARNING: drivers/clk/clk.c:1206 at clk_core_disable+0xa4/0xac, CPU#1: sh/542<br /> <br /> pc : clk_core_disable+0xa4/0xac<br /> lr : clk_core_disable+0xa4/0xac<br /> <br /> Call trace:<br /> clk_core_disable+0xa4/0xac (P)<br /> clk_disable+0x30/0x4c<br /> iris_disable_unprepare_clock+0x20/0x48 [qcom_iris]<br /> iris_vpu_power_off_hw+0x48/0x58 [qcom_iris]<br /> iris_vpu33_power_off_hardware+0x44/0x230 [qcom_iris]<br /> iris_vpu_power_off+0x34/0x84 [qcom_iris]<br /> iris_core_deinit+0x44/0xc8 [qcom_iris]<br /> iris_remove+0x20/0x48 [qcom_iris]<br /> platform_remove+0x20/0x30<br /> device_remove+0x4c/0x80<br /> <br /> ---[ end trace 0000000000000000 ]---<br /> ------------[ cut here ]------------<br /> video_cc_mvs0_clk already unprepared<br /> WARNING: drivers/clk/clk.c:1065 at clk_core_unprepare+0xf0/0x110, CPU#2: sh/542<br /> <br /> pc : clk_core_unprepare+0xf0/0x110<br /> lr : clk_core_unprepare+0xf0/0x110<br /> <br /> Call trace:<br /> clk_core_unprepare+0xf0/0x110 (P)<br /> clk_unprepare+0x2c/0x44<br /> iris_disable_unprepare_clock+0x28/0x48 [qcom_iris]<br /> iris_vpu_power_off_hw+0x48/0x58 [qcom_iris]<br /> iris_vpu33_power_off_hardware+0x44/0x230 [qcom_iris]<br /> iris_vpu_power_off+0x34/0x84 [qcom_iris]<br /> iris_core_deinit+0x44/0xc8 [qcom_iris]<br /> iris_remove+0x20/0x48 [qcom_iris]<br /> platform_remove+0x20/0x30<br /> device_remove+0x4c/0x80<br /> <br /> ---[ end trace 0000000000000000 ]---<br /> genpd genpd:0:aa00000.video-codec: Runtime PM usage count underflow!<br /> ------------[ cut here ]------------<br /> gcc_video_axi0_clk already disabled<br /> WARNING: drivers/clk/clk.c:1206 at clk_core_disable+0xa4/0xac, CPU#4: sh/542<br /> <br /> pc : clk_core_disable+0xa4/0xac<br /> lr : clk_core_disable+0xa4/0xac<br /> <br /> Call trace:<br /> clk_core_disable+0xa4/0xac (P)<br /> clk_disable+0x30/0x4c<br /> iris_disable_unprepare_clock+0x20/0x48 [qcom_iris]<br /> iris_vpu33_power_off_controller+0x17c/0x428 [qcom_iris]<br /> iris_vpu_power_off+0x48/0x84 [qcom_iris]<br /> iris_core_deinit+0x44/0xc8 [qcom_iris]<br /> iris_remove+0x20/0x48 [qcom_iris]<br /> platform_remove+0x20/0x30<br /> device_remove+0x4c/0x80<br /> <br /> ------------[ cut here ]------------<br /> gcc_video_axi0_clk already unprepared<br /> WARNING: drivers/clk/clk.c:1065 at clk_core_unprepare+0xf0/0x110, CPU#4: sh/542<br /> <br /> pc : clk_core_unprepare+0xf0/0x110<br /> lr : clk_core_unprepare+0xf0/0x110<br /> <br /> Call trace:<br /> clk_core_unprepare+0xf0/0x110 (P)<br /> clk_unprepare+0x2c/0x44<br /> iris_disable_unprepare_clock+0x28/0x48 [qcom_iris]<br /> iris_vpu33_power_off_controller+0x17c/0x428 [qcom_iris]<br /> iris_vpu_power_off+0x48/0x84 [qcom_iris]<br /> iris_core_deinit+0x44/0xc8 [qcom_iris]<br /> iris_remove+0x20/0x48 [qcom_iris]<br /> platform_remove+0x20/0x30<br /> device_remove+0x4c/0x80<br /> <br /> ---[ end trace 0000000000000000 ]---<br /> <br /> Skip deinit if initialization never succeeded.