Linux Kernel Coresight Component Improper Return Value Handling Vulnerability

A vulnerability exists in the Linux kernel's handling of return values from the devm_kzalloc function within the Coresight TRBE driver. The issue arises because devm_kzalloc can return a null pointer, leading to potential null pointer dereferences. This vulnerability affects the stable versions of the Linux kernel.

Impact

The vulnerability could lead to null pointer dereferences, causing potential crashes or undefined behavior in the Coresight TRBE driver.

Reproduction

The vulnerability can be reproduced by loading the Coresight TRBE driver in a stable version of the Linux kernel. The driver will incorrectly handle a null pointer return from the devm_kzalloc function, which can lead to a null pointer dereference.

Remediation

Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been addressed.