UBUNTU-CVE-2025-40208: Low severity ubuntu/linux-hwe-edge vulnerability

Q: Which Ubuntu kernel packages are listed as affected?

The listed packages are ubuntu/linux-riscv, ubuntu/linux-realtime, ubuntu/linux-hwe-edge, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-azure-fde, ubuntu/linux-aws-5.0, and ubuntu/linux-aws-5.3.

Q: What conditions are needed to trigger the issue?

The Qualcomm Iris video codec firmware download must first fail, causing core initialization to fail. Unbinding the aa00000.video-codec device from the qcom-iris driver afterward triggers the reported runtime PM usage-count underflow and clock-disable warning.

Q: How can an administrator identify that this issue has occurred?

Kernel logs may show a failed direct firmware load for qcom/vpu/vpu33_p4.mbn, followed by messages such as "firmware download failed" and "core init failed." After device unbind, logs can include "Runtime PM usage count underflow" and a warning that video_cc_mvs0_clk is already disabled.

Q: What can be done if an update cannot be applied immediately?

Avoid unbinding the aa00000.video-codec device from the qcom-iris driver after a firmware download or core initialization failure. Investigate and correct the firmware-loading failure before removing the device driver.

Published Nov 12, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec: firmware download failed qcom-iris aa00000.video-codec: core init failed then: $ echo aa00000.video-codec > /sys/bus/platform/drivers/qcom-iris/unbind Triggers: genpd genpd:1:aa00000.video-codec: Runtime PM usage count underflow! ------------[ cut here ]------------ videoccmvs0clk already disabled WARNING: drivers/clk/clk.c:1206 at clkcoredisable+0xa4/0xac, CPU#1: sh/542 <snip> pc : clkcoredisable+0xa4/0xac lr : clkcoredisable+0xa4/0xac <snip> Call trace: clkcoredisable+0xa4/0xac (P) clkdisable+0x30/0x4c irisdisableunprepareclock+0x20/0x48 [qcomiris] irisvpupoweroffhw+0x48/0x58 [qcomiris] irisvpu33poweroffhardware+0x44/0x230 [qcomiris] irisvpupoweroff+0x34/0x84 [qcomiris] iriscoredeinit+0x44/0xc8 [qcomiris] irisremove+0x20/0x48 [qcomiris] platformremove+0x20/0x30 deviceremove+0x4c/0x80 <snip> ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ videoccmvs0clk already unprepared WARNING: drivers/clk/clk.c:1065 at clkcoreunprepare+0xf0/0x110, CPU#2: sh/542 <snip> pc : clkcoreunprepare+0xf0/0x110 lr : clkcoreunprepare+0xf0/0x110 <snip> Call trace: clkcoreunprepare+0xf0/0x110 (P) clkunprepare+0x2c/0x44 irisdisableunprepareclock+0x28/0x48 [qcomiris] irisvpupoweroffhw+0x48/0x58 [qcomiris] irisvpu33poweroffhardware+0x44/0x230 [qcomiris] irisvpupoweroff+0x34/0x84 [qcomiris] iriscoredeinit+0x44/0xc8 [qcomiris] irisremove+0x20/0x48 [qcomiris] platformremove+0x20/0x30 deviceremove+0x4c/0x80 <snip> ---[ end trace 0000000000000000 ]--- genpd genpd:0:aa00000.video-codec: Runtime PM usage count underflow! ------------[ cut here ]------------ gccvideoaxi0clk already disabled WARNING: drivers/clk/clk.c:1206 at clkcoredisable+0xa4/0xac, CPU#4: sh/542 <snip> pc : clkcoredisable+0xa4/0xac lr : clkcoredisable+0xa4/0xac <snip> Call trace: clkcoredisable+0xa4/0xac (P) clkdisable+0x30/0x4c irisdisableunprepareclock+0x20/0x48 [qcomiris] irisvpu33poweroffcontroller+0x17c/0x428 [qcomiris] irisvpupoweroff+0x48/0x84 [qcomiris] iriscoredeinit+0x44/0xc8 [qcomiris] irisremove+0x20/0x48 [qcomiris] platformremove+0x20/0x30 deviceremove+0x4c/0x80 <snip> ------------[ cut here ]------------ gccvideoaxi0clk already unprepared WARNING: drivers/clk/clk.c:1065 at clkcoreunprepare+0xf0/0x110, CPU#4: sh/542 <snip> pc : clkcoreunprepare+0xf0/0x110 lr : clkcoreunprepare+0xf0/0x110 <snip> Call trace: clkcoreunprepare+0xf0/0x110 (P) clkunprepare+0x2c/0x44 irisdisableunprepareclock+0x28/0x48 [qcomiris] irisvpu33poweroffcontroller+0x17c/0x428 [qcomiris] irisvpupoweroff+0x48/0x84 [qcomiris] iriscoredeinit+0x44/0xc8 [qcomiris] irisremove+0x20/0x48 [qcomiris] platformremove+0x20/0x30 deviceremove+0x4c/0x80 <snip> ---[ end trace 0000000000000000 ]--- Skip deinit if initialization never succeeded.

Affected Software

114 affected componentsFixes available

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle-6.5*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-aws-6.14*

ubuntu/linux-aws-6.17<6.17.0-1007.7~24.04.1

6.17.0-1007.7~24.04.1

ubuntu/linux-azure-6.11*

ubuntu/linux-azure-6.14*

ubuntu/linux-azure-fde-6.14*

ubuntu/linux-azure-fde-6.17*

ubuntu/linux-azure-nvidia-6.14*

ubuntu/linux-gcp-6.11*

ubuntu/linux-gcp-6.14*

ubuntu/linux-gcp-6.17<6.17.0-1008.8~24.04.1

6.17.0-1008.8~24.04.1

ubuntu/linux-hwe-6.11*

ubuntu/linux-hwe-6.14*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-nvidia-6.11*

ubuntu/linux-nvidia-6.17<6.17.0-1008.8

6.17.0-1008.8

ubuntu/linux-oem-6.11*

ubuntu/linux-oem-6.14*

ubuntu/linux-oem-6.17<6.17.0-1011.11

6.17.0-1011.11

ubuntu/linux-oem-6.8*

ubuntu/linux-oracle-6.14*

ubuntu/linux-oracle-6.17<6.17.0-1007.7~24.04.1

6.17.0-1007.7~24.04.1

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-6.14*

ubuntu/linux-realtime-6.14*

ubuntu/linux-realtime-6.17<6.17.0-1006.7~24.04.1

6.17.0-1006.7~24.04.1

ubuntu/linux<6.17.0-14.14

6.17.0-14.14

ubuntu/linux-aws<6.17.0-1007.7

6.17.0-1007.7

ubuntu/linux-azure<6.17.0-1008.8

6.17.0-1008.8

ubuntu/linux-azure-fde*

ubuntu/linux-gcp<6.17.0-1007.7

6.17.0-1007.7

ubuntu/linux-oracle<6.17.0-1007.7

6.17.0-1007.7

ubuntu/linux-raspi<6.17.0-1008.8

6.17.0-1008.8

ubuntu/linux-realtime<6.17.0-1006.7

6.17.0-1006.7

ubuntu/linux-riscv<6.17.0-14.14.1

6.17.0-14.14.1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1007.7~24.04.1
Upgrade
Upgrade ubuntu/linux-gcp-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1008.8~24.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1008.8
Upgrade
Upgrade ubuntu/linux-oem-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1011.11
Upgrade
Upgrade ubuntu/linux-oracle-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1007.7~24.04.1
Upgrade
Upgrade ubuntu/linux-realtime-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1006.7~24.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.17.0-14.14
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.17.0-1007.7
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.17.0-1008.8
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.17.0-1007.7
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.17.0-1007.7
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.17.0-1008.8
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.17.0-1006.7
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.17.0-14.14.1
Compensating control
In the qcom-iris module removal path, skip deinitialization when firmware loading or core initialization never succeeded.

Event History

Nov 12, 2025

CVE Published

via OSV·10:15 PM

Data Sourced

via OSV·10:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which Ubuntu kernel packages are listed as affected?

The listed packages are ubuntu/linux-riscv, ubuntu/linux-realtime, ubuntu/linux-hwe-edge, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-azure-fde, ubuntu/linux-aws-5.0, and ubuntu/linux-aws-5.3.

What conditions are needed to trigger the issue?

The Qualcomm Iris video codec firmware download must first fail, causing core initialization to fail. Unbinding the aa00000.video-codec device from the qcom-iris driver afterward triggers the reported runtime PM usage-count underflow and clock-disable warning.

How can an administrator identify that this issue has occurred?

Kernel logs may show a failed direct firmware load for qcom/vpu/vpu33_p4.mbn, followed by messages such as "firmware download failed" and "core init failed." After device unbind, logs can include "Runtime PM usage count underflow" and a warning that video_cc_mvs0_clk is already disabled.

What can be done if an update cannot be applied immediately?

Avoid unbinding the aa00000.video-codec device from the qcom-iris driver after a firmware download or core initialization failure. Investigate and correct the firmware-loading failure before removing the device driver.

UBUNTU-CVE-2025-40208: Low severity ubuntu/linux-hwe-edge vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which Ubuntu kernel packages are listed as affected?

What conditions are needed to trigger the issue?

How can an administrator identify that this issue has occurred?

What can be done if an update cannot be applied immediately?

Company

Resources

Contact

Frequently Asked Questions

Which Ubuntu kernel packages are listed as affected?

What conditions are needed to trigger the issue?

How can an administrator identify that this issue has occurred?

What can be done if an update cannot be applied immediately?