CVE-2025-40113: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E
In the Linux kernel, the following vulnerability has been resolved:
remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E
The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies for the "lite" firmware loaded by the boot firmware.
When preparing to load the new ADSP firmware we shutdown the litepasid for the main firmware, but we don't shutdown the corresponding lite pasid for the DTB. The fact that we're leaving it "running" forever becomes obvious if you try to reuse (or just access) the memory region used by the "lite" firmware: The &adspbootmem is accessible, but accessing the &adspbootdtbmem results in a crash.
We don't support reusing the memory regions currently, but nevertheless we should not keep part of the lite firmware running. Fix this by adding the litedtbpasid and shutting it down as well.
We don't have a way to detect if the lite firmware is actually running yet, so ignore the return status of qcomscmpasshutdown() for now. This was already the case before, the assignment to "ret" is not used anywhere.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
When preparing to load new ADSP firmware on X1E, add the lite_dtb_pas_id and shut down both the lite_pas_id and lite_dtb_pas_id so the lite firmware and its DTB do not remain running or leave their memory regions accessible.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40113?
CVE-2025-40113 has been rated as a high severity vulnerability in the Linux kernel.
How do I fix CVE-2025-40113?
To fix CVE-2025-40113, ensure you update your Linux kernel to the latest version provided by your distribution.
What systems are affected by CVE-2025-40113?
CVE-2025-40113 affects systems running the Linux kernel that use the remoteproc subsystem, specifically related to ADSP firmware.
Is CVE-2025-40113 a local or remote attack vulnerability?
CVE-2025-40113 is categorized as a local attack vulnerability that could be exploited under certain conditions.
What impact does CVE-2025-40113 have on affected systems?
CVE-2025-40113 may lead to potential denial of service or unexpected behavior in systems utilizing the affected remoteproc feature.