CVE-2025-40113

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies for the "lite" firmware loaded by the boot firmware. When preparing to load the new ADSP firmware we shutdown the lite_pas_id for the main firmware, but we don't shutdown the corresponding lite pas_id for the DTB. The fact that we're leaving it "running" forever becomes obvious if you try to reuse (or just access) the memory region used by the "lite" firmware: The &adsp_boot_mem is accessible, but accessing the &adsp_boot_dtb_mem results in a crash. We don't support reusing the memory regions currently, but nevertheless we should not keep part of the lite firmware running. Fix this by adding the lite_dtb_pas_id and shutting it down as well. We don't have a way to detect if the lite firmware is actually running yet, so ignore the return status of qcom_scm_pas_shutdown() for now. This was already the case before, the assignment to "ret" is not used anywhere.

• https://git.kernel.org/stable/c/142964960c7c35de5c5f7bdd61c32699de693630
• https://git.kernel.org/stable/c/ee150acd273aded01a726ce39b1f6128200799e6

Published

Nov 12, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-40108In the Linux kernel, the following vulnerability has been re…
• CVE-2025-40109In the Linux kernel, the following vulnerability has been re…
• CVE-2025-4011A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/…5.1
• CVE-2025-40110In the Linux kernel, the following vulnerability has been re…
• CVE-2025-40111In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40112In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40114In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40115In the Linux kernel, the following vulnerability has been re…
• CVE-2025-40116In the Linux kernel, the following vulnerability has been re…
• CVE-2025-40117In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40118In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40119In the Linux kernel, the following vulnerability has been re…