In the Linux kernel, the following vulnerability has been resolved:
coresight: trbe: Return NULL pointer for allocation failures
When the TRBE driver fails to allocate a buffer, it currently returns the error code "-ENOMEM". However, the caller etmsetupaux() only checks for a NULL pointer, so it misses the error. As a result, the driver continues and eventually causes a kernel panic.
Fix this by returning a NULL pointer from armtrbealloc_buffer() on allocation failures. This allows that the callers can properly handle the failure.
[
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe53a726d5edf864e80b490780cc135fc1adece9",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c",
"function": "arm_trbe_alloc_buffer"
},
"digest": {
"length": 890.0,
"function_hash": "107623109258185290620523133695798970573"
},
"signature_type": "Function",
"id": "CVE-2025-40060-162b4160",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a55c161f7f9c1aa1c70611b39830d51c83ef36d",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c"
},
"digest": {
"line_hashes": [
"24452212353707141672361366726242235652",
"65250516429817061749287614199812518659",
"2847603442340568113104852589541663432",
"15601021850542195681021163005645103568",
"72140403651937910144618002417599553533",
"89357522240987917906830066754720583500",
"3492379509327145296951136104708611021",
"60557657314132909251419148494805766500",
"220413837659128284895491549905157650039",
"189103520947276250498504358531103718743",
"51165415566069055509326741351986439515",
"306588779098785366240360928526045962877"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2025-40060-20e6a05e",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9768536f82600a05ce901e31ccfabd92c027ff71",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c"
},
"digest": {
"line_hashes": [
"24452212353707141672361366726242235652",
"65250516429817061749287614199812518659",
"2847603442340568113104852589541663432",
"15601021850542195681021163005645103568",
"72140403651937910144618002417599553533",
"89357522240987917906830066754720583500",
"3492379509327145296951136104708611021",
"60557657314132909251419148494805766500",
"220413837659128284895491549905157650039",
"189103520947276250498504358531103718743",
"51165415566069055509326741351986439515",
"306588779098785366240360928526045962877"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2025-40060-2adbed9a",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a55c161f7f9c1aa1c70611b39830d51c83ef36d",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c",
"function": "arm_trbe_alloc_buffer"
},
"digest": {
"length": 890.0,
"function_hash": "107623109258185290620523133695798970573"
},
"signature_type": "Function",
"id": "CVE-2025-40060-2b5e9119",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9768536f82600a05ce901e31ccfabd92c027ff71",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c",
"function": "arm_trbe_alloc_buffer"
},
"digest": {
"length": 890.0,
"function_hash": "107623109258185290620523133695798970573"
},
"signature_type": "Function",
"id": "CVE-2025-40060-4639fd9d",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe53a726d5edf864e80b490780cc135fc1adece9",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c"
},
"digest": {
"line_hashes": [
"24452212353707141672361366726242235652",
"65250516429817061749287614199812518659",
"2847603442340568113104852589541663432",
"15601021850542195681021163005645103568",
"72140403651937910144618002417599553533",
"89357522240987917906830066754720583500",
"3492379509327145296951136104708611021",
"60557657314132909251419148494805766500",
"220413837659128284895491549905157650039",
"189103520947276250498504358531103718743",
"51165415566069055509326741351986439515",
"306588779098785366240360928526045962877"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2025-40060-4a94149c",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cef047e0a55cb07906fcaae99170f19a9c0bb6c2",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c"
},
"digest": {
"line_hashes": [
"24452212353707141672361366726242235652",
"65250516429817061749287614199812518659",
"2847603442340568113104852589541663432",
"15601021850542195681021163005645103568",
"72140403651937910144618002417599553533",
"89357522240987917906830066754720583500",
"3492379509327145296951136104708611021",
"60557657314132909251419148494805766500",
"220413837659128284895491549905157650039",
"189103520947276250498504358531103718743",
"51165415566069055509326741351986439515",
"306588779098785366240360928526045962877"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2025-40060-85a72e46",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@296da78494633e1ab5e2e74173a9c8683b04aa6b",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c"
},
"digest": {
"line_hashes": [
"24452212353707141672361366726242235652",
"65250516429817061749287614199812518659",
"2847603442340568113104852589541663432",
"15601021850542195681021163005645103568",
"72140403651937910144618002417599553533",
"89357522240987917906830066754720583500",
"3492379509327145296951136104708611021",
"60557657314132909251419148494805766500",
"220413837659128284895491549905157650039",
"189103520947276250498504358531103718743",
"51165415566069055509326741351986439515",
"306588779098785366240360928526045962877"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2025-40060-8a14fd69",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@296da78494633e1ab5e2e74173a9c8683b04aa6b",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c",
"function": "arm_trbe_alloc_buffer"
},
"digest": {
"length": 890.0,
"function_hash": "107623109258185290620523133695798970573"
},
"signature_type": "Function",
"id": "CVE-2025-40060-acaf6f3f",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f505a165f1c7cd37b4cb6952042a5984693a4067",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c"
},
"digest": {
"line_hashes": [
"24452212353707141672361366726242235652",
"65250516429817061749287614199812518659",
"2847603442340568113104852589541663432",
"15601021850542195681021163005645103568",
"72140403651937910144618002417599553533",
"89357522240987917906830066754720583500",
"3492379509327145296951136104708611021",
"60557657314132909251419148494805766500",
"220413837659128284895491549905157650039",
"189103520947276250498504358531103718743",
"51165415566069055509326741351986439515",
"306588779098785366240360928526045962877"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2025-40060-d04cb9d2",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cef047e0a55cb07906fcaae99170f19a9c0bb6c2",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c",
"function": "arm_trbe_alloc_buffer"
},
"digest": {
"length": 890.0,
"function_hash": "107623109258185290620523133695798970573"
},
"signature_type": "Function",
"id": "CVE-2025-40060-db9ee257",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f505a165f1c7cd37b4cb6952042a5984693a4067",
"target": {
"file": "drivers/hwtracing/coresight/coresight-trbe.c",
"function": "arm_trbe_alloc_buffer"
},
"digest": {
"length": 890.0,
"function_hash": "107623109258185290620523133695798970573"
},
"signature_type": "Function",
"id": "CVE-2025-40060-feecc138",
"signature_version": "v1"
}
]