CVE-2025-22011

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the mixed usage of raspberrypi-power and bcm2835-power at the same time, causing the VPU firmware to crash on xHCI power-domain resume during s2idle tests on the Raspberry CM4. This is observed when attempting to set power to 1, resulting in a failure with error code -110. The problem seems to be caused by the usage of the VPU firmware power-domain driver.

Recommendations: To resolve the issue, avoid using the VPU firmware power-domain driver, which prevents the VPU crash. At the moment, there is no information about a newer version that contains a fix for this vulnerability.