PT-2025-46765 · Linux+3 · Linux Kernel+3

Published 2025-08-22 · Updated 2026-05-26 · CVE-2025-40208

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel's qcom-iris driver contains an issue where module removal can fail if firmware download fails. Specifically, if the firmware download for the qcom/vpu/vpu33 p4.mbn file fails, the driver may not properly clean up resources, leading to runtime errors and potential system instability. The issue manifests as warnings related to clock disabling and runtime PM usage count underflows during module removal. The fix skips deinitialization if the initialization process was unsuccessful.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2025-14661

CVE-2025-40208

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

Affected Products

Linux Kernel

Linuxmint

Ubuntu

Qcom/Vpu/Vpu33 P4.Mbn

References · 398

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40208.json · Exploit
• https://ubuntu.com/security/CVE-2025-40223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68209 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40294 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40040 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68311 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40106 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40341 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40122 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68183 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40297 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40285 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40193 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40119 · Vendor Advisory