Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-22011— ARM: dts: bcm2711: Fix xHCI power-domain

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于xHCI电源域配置错误，可能导致VPU固件在恢复时崩溃。

AI Predicted 5.3 Difficulty: Theoretical EPSS 0.19% · P9

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 8

VendorProduct Version RangeStatus
Linux Linux 522c35e08b53f157ad3e51848caa861b258001e4< b8a47aa0b3df701d0fc41b3caf78d00571776be0 affected
522c35e08b53f157ad3e51848caa861b258001e4< 393947e06867923d4c2be380d46efd03407a8ce2 affected
522c35e08b53f157ad3e51848caa861b258001e4< f44fa354a0715577ca32b085f6f60bcf32c748dd affected
6.8 affected
< 6.8 unaffected
6.12.21≤ 6.12.* unaffected
6.13.9≤ 6.13.* unaffected
6.14≤ * unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-22011

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ARM: dts: bcm2711: Fix xHCI power-domain
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ARM: dts: bcm2711: Fix xHCI power-domain During s2idle tests on the Raspberry CM4 the VPU firmware always crashes on xHCI power-domain resume: root@raspberrypi:/sys/power# echo freeze > state [ 70.724347] xhci_suspend finished [ 70.727730] xhci_plat_suspend finished [ 70.755624] bcm2835-power bcm2835-power: Power grafx off [ 70.761127] USB: Set power to 0 [ 74.653040] USB: Failed to set power to 1 (-110) This seems to be caused because of the mixed usage of raspberrypi-power and bcm2835-power at the same time. So avoid the usage of the VPU firmware power-domain driver, which prevents the VPU crash.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于xHCI电源域配置错误，可能导致VPU固件在恢复时崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 522c35e08b53f157ad3e51848caa861b258001e4 ~ b8a47aa0b3df701d0fc41b3caf78d00571776be0 -
Linux Linux 6.8 -

II. Public POCs for CVE-2025-22011

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-22011

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-04-08 · 10 CVEs total

CVE-2025-22012 8.8 HIGH Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu"
CVE-2025-22015 7.8 HIGH mm/migrate: fix shmem xarray update during migration
CVE-2025-22013 7.3 HIGH KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
CVE-2025-22017 devlink: fix xa_alloc_cyclic() error handling
CVE-2025-22016 dpll: fix xa_alloc_cyclic() error handling
CVE-2025-22014 soc: qcom: pdr: Fix the potential deadlock
CVE-2025-22010 RDMA/hns: Fix soft lockup during bt pages loop
CVE-2025-22009 regulator: dummy: force synchronous probing
CVE-2025-22008 regulator: check that dummy regulator has been probed before using it

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-22011

No comments yet

Leave a comment