InfoSec Signals™
Sign InStart Free
Back to CVE records
Not yet scoredPublished Oct 28, 2025

CVE-2025-40060coresight: trbe: Return NULL pointer for allocation failures

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: coresight: trbe: Return NULL pointer for allocation failures When the TRBE driver fails to allocate a buffer, it currently returns the error code "-ENOMEM". However, the caller etm_setup_aux() only checks for a NULL pointer, so it misses the error. As a result, the driver continues and eventually causes a kernel panic. Fix this by returning a NULL pointer from arm_trbe_alloc_buffer() on allocation failures. This allows that the callers can properly handle the failure.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 3fbf7f011f2426dac8c982f1d2ef469a7959a524 before cef047e0a55cb07906fcaae99170f19a9c0bb6c2; from 3fbf7f011f2426dac8c982f1d2ef469a7959a524 before fe53a726d5edf864e80b490780cc135fc1adece9; from 3fbf7f011f2426dac8c982f1d2ef469a7959a524 before 9768536f82600a05ce901e31ccfabd92c027ff71; from 3fbf7f011f2426dac8c982f1d2ef469a7959a524 before 296da78494633e1ab5e2e74173a9c8683b04aa6b; from 3fbf7f011f2426dac8c982f1d2ef469a7959a524 before f505a165f1c7cd37b4cb6952042a5984693a4067; from 3fbf7f011f2426dac8c982f1d2ef469a7959a524 before 8a55c161f7f9c1aa1c70611b39830d51c83ef36d
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.