CVE-2025-40060

CVE-2025-40060

published October 28, 2025

CVSS
—
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

coresight: trbe: Return NULL pointer for allocation failures

When the TRBE driver fails to allocate a buffer, it currently returns

the error code "-ENOMEM". However, the caller etm_setup_aux() only

checks for a NULL pointer, so it misses the error. As a result, the

driver continues and eventually causes a kernel panic.

Fix this by returning a NULL pointer from arm_trbe_alloc_buffer() on

allocation failures. This allows that the callers can properly handle

the failure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.0th percentile
Published
2025-10-28T16:15Z
References (6)
EPSS history
Timeline
  • 28 OCT 11:48Z
    coresight: trbe: Return NULL pointer for allocation failures
    cvelistv5