In the Linux kernel, the following vulnerability has been resolved:
clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
A recent change in the venus driver results in a stuck clock on the Lenovo ThinkPad X13s, for example, when streaming video in firefox:
video_cc_mvs0_clk status stuck at 'off' WARNING: CPU: 6 PID: 2885 at drivers/clk/qcom/clk-branch.c:87 clk_branch_wait+0x144/0x15c ... Call trace: clk_branch_wait+0x144/0x15c clk_branch2_enable+0x30/0x40 clk_core_enable+0xd8/0x29c clk_enable+0x2c/0x4c vcodec_clks_enable.isra.0+0x94/0xd8 [venus_core] coreid_power_v4+0x464/0x628 [venus_core] vdec_start_streaming+0xc4/0x510 [venus_dec] vb2_start_streaming+0x6c/0x180 [videobuf2_common] vb2_core_streamon+0x120/0x1dc [videobuf2_common] vb2_streamon+0x1c/0x6c [videobuf2_v4l2] v4l2_m2m_ioctl_streamon+0x30/0x80 [v4l2_mem2mem] v4l_streamon+0x24/0x30 [videodev]
using the out-of-tree sm8350/sc8280xp venus support. [1]
Update also the sm8350/sc8280xp GDSC definitions so that the hw control mode can be changed at runtime as the venus driver now requires.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1009-gcp | Feb 20, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub