Riskcovery

CVE-2025-40060

coresight: trbe: Return NULL pointer for allocation failures

State
Published
Severity
Not scored
Published
Oct 28, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

coresight: trbe: Return NULL pointer for allocation failures

When the TRBE driver fails to allocate a buffer, it currently returns the error code "-ENOMEM". However, the caller etm_setup_aux() only checks for a NULL pointer, so it misses the error. As a result, the driver continues and eventually causes a kernel panic.

Fix this by returning a NULL pointer from arm_trbe_alloc_buffer() on allocation failures. This allows that the callers can properly handle the failure.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before cef047e0a55cb07906fcaae99170f19a9c0bb6c2Affected
  • 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before fe53a726d5edf864e80b490780cc135fc1adece9Affected
  • 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before 9768536f82600a05ce901e31ccfabd92c027ff71Affected
  • 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before 296da78494633e1ab5e2e74173a9c8683b04aa6bAffected
  • 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before f505a165f1c7cd37b4cb6952042a5984693a4067Affected
  • 3fbf7f011f2426dac8c982f1d2ef469a7959a524 to before 8a55c161f7f9c1aa1c70611b39830d51c83ef36dAffected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.195 through 5.15.*Not affected
  • 6.1.156 through 6.1.*Not affected
  • 6.6.112 through 6.6.*Not affected
  • 6.12.53 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.