Linux Kernel Module Vulnerability in QCOM IRIS Video Codec by Qualcomm

CVE-2025-40208

What is CVE-2025-40208?

The Linux Kernel contains a vulnerability impacting the QCOM IRIS video codec where a failure during firmware download can lead to improper module removal. This situation may trigger runtime power management (PM) usage count underflows, potentially causing instability in video processing. The bug manifests when the module attempts to unbind and clean up resources if the firmware fails to load, causing critical operations to be skipped, which can affect overall system performance and reliability.

References