Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-22011

ARM: dts: bcm2711: Fix xHCI power-domain

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: bcm2711: Fix xHCI power-domain During s2idle tests on the Raspberry CM4 the VPU firmware always crashes on xHCI power-domain resume: root@raspberrypi:/sys/power# echo freeze > state [ 70.724347] xhci_suspend finished [ 70.727730] xhci_plat_suspend finished [ 70.755624] bcm2835-power bcm2835-power: Power grafx off [ 70.761127] USB: Set power to 0 [ 74.653040] USB: Failed to set power to 1 (-110) This seems to be caused because of the mixed usage of raspberrypi-power and bcm2835-power at the same time. So avoid the usage of the VPU firmware power-domain driver, which prevents the VPU crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 522c35e08b53f157ad3e51848caa861b258001e4 to < b8a47aa0b3df701d0fc41b3caf78d00571776be0affected
  • 522c35e08b53f157ad3e51848caa861b258001e4 to < 393947e06867923d4c2be380d46efd03407a8ce2affected
  • 522c35e08b53f157ad3e51848caa861b258001e4 to < f44fa354a0715577ca32b085f6f60bcf32c748ddaffected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.21 to ≤ 6.12.*unaffected
  • 6.13.9 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References