CVE-2025-40060

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/10/2025
Last modified:
30/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> coresight: trbe: Return NULL pointer for allocation failures<br /> <br /> When the TRBE driver fails to allocate a buffer, it currently returns<br /> the error code "-ENOMEM". However, the caller etm_setup_aux() only<br /> checks for a NULL pointer, so it misses the error. As a result, the<br /> driver continues and eventually causes a kernel panic.<br /> <br /> Fix this by returning a NULL pointer from arm_trbe_alloc_buffer() on<br /> allocation failures. This allows that the callers can properly handle<br /> the failure.

Impact