CVE-2025-40113

A flaw was found in the Linux kernel’s remoteproc subsystem for Qualcomm processors (“qcom: pas”). On X1E platforms, the ADSP (Audio DSP) firmware has separate binaries for the main firmware and a DTB (“device tree blob”), including a “lite” version for each. While shutting down the “lite” ADSP for the main firmware, the corresponding “lite DTB” ADSP instance was not being shut down, leading to a scenario where part of the firmware remains active indefinitely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.