CVE-2025-40113 — Missing Release of Resource after Effective Lifetime in Linux
Severity
2.5LOW
No vectorEPSS
0.0%
top 94.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E
The ADSP firmware on X1E has separate firmware binaries for the main
firmware and the DTB. The same applies for the "lite" firmware loaded by
the boot firmware.
When preparing to load the new ADSP firmware we shutdown the lite_pas_id
for the main firmware, but we don't shutdown the corresponding lite pas_id
for the DTB. The fact that we're leaving it "running" forever becom…
Affected Packages5 packages
▶CVEListV5linux/linux62210f7509e13a2caa7b080722a45229b8f17a0a — ee150acd273aded01a726ce39b1f6128200799e6+2