CVE-2025-40059: linux
Vulnerability summary
CVE-2025-40059 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 32 · Related 32Timeline
- 28-10-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: coresight: Fix incorrect handling for return value of devm_kzalloc The return value of devm_kzalloc could be an null pointer, use "!desc.pdata" to fix incorrect handling return value of devm_kzalloc.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
11%
Versus all other CVEs
30-day change
+0.01 pp
From 0.20% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu127 products
- linux< 6.8.0-106.106 | < 6.17.0-14.14
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1050.53 | < 6.17.0-1007.7
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.12.57-1 | < 6.17.6-1
Linux1 product
- linux≥ 4277f035d227e829133df284be7e35b7236a5b0f, < 8c4e7e646d5d9050b374baf5c6bb3a00fb79e206 | ≥ 4277f035d227e829133df284be7e35b7236a5b0f, < 9688b66d0a5e0eecf44f6286b8d9f7a161264035 | ≥ 4277f035d227e829133df284be7e35b7236a5b0f, < 70714eb7243eaf333d23501d4c7bdd9daf011c01 | 6.8
3 vendors · 129 products
