Linux Kernel Venus Driver OPP Configuration Warning During Probe Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Venus driver has been addressed, which caused a warning related to the Operating Performance Points (OPP) configuration during the driver's probe process. This issue was observed in versions through 5.19.0-rc8-next-20220728. The warning was triggered by the OPP core not receiving all necessary configuration options before the OPP table was added, leading to a probe error. The vulnerability was linked to several modules, including qcom_spmi_adc5, venus_core, and others, on a Qualcomm Robotics RB5 device.

Impact

The vulnerability caused a warning during the Venus driver's probe process, indicating a misconfiguration in the OPP settings, which could potentially lead to improper performance management of the device's CPU.

Reproduction

The vulnerability can be reproduced by probing the Venus driver on a device running the affected Linux kernel version. This will trigger a warning about the OPP configuration, as the driver attempts to set up performance points without having all the necessary options configured first.

Remediation

The vulnerability has been fixed by reordering the code related to the OPP core in the Venus driver, ensuring that all configuration options are provided before the OPP table is added.

Added: Jun 18, 2025, 8:15 PM
Updated: Jun 18, 2025, 8:15 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
0.0
relevance
0.2
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.