Vulnerability in Linux

CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33…

EPSS: 0.002 (4.6th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions d7378f84e94e14998b3469dcc0d8ce609d049ccc, 6.15, 0

References