CVE-2025-40060

Source
https://cve.org/CVERecord?id=CVE-2025-40060
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40060.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40060
Downstream
Related
Published
2025-10-28T11:48:32.775Z
Modified
2026-03-20T12:43:10.084616Z
Summary
coresight: trbe: Return NULL pointer for allocation failures
Details

In the Linux kernel, the following vulnerability has been resolved:

coresight: trbe: Return NULL pointer for allocation failures

When the TRBE driver fails to allocate a buffer, it currently returns the error code "-ENOMEM". However, the caller etmsetupaux() only checks for a NULL pointer, so it misses the error. As a result, the driver continues and eventually causes a kernel panic.

Fix this by returning a NULL pointer from armtrbealloc_buffer() on allocation failures. This allows that the callers can properly handle the failure.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40060.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3fbf7f011f2426dac8c982f1d2ef469a7959a524
Fixed
cef047e0a55cb07906fcaae99170f19a9c0bb6c2
Fixed
fe53a726d5edf864e80b490780cc135fc1adece9
Fixed
9768536f82600a05ce901e31ccfabd92c027ff71
Fixed
296da78494633e1ab5e2e74173a9c8683b04aa6b
Fixed
f505a165f1c7cd37b4cb6952042a5984693a4067
Fixed
8a55c161f7f9c1aa1c70611b39830d51c83ef36d

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40060.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
5.15.195
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.156
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.112
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.53
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40060.json"