Riskcovery

CVE-2025-40161

mailbox: zynqmp-ipi: Fix SGI cleanup on unbind

State
Published
Severity
Not scored
Published
Nov 12, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: zynqmp-ipi: Fix SGI cleanup on unbind

The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number < 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to kernel crash.

Add explicit irq_type field to pdata for reliable identification of SGI interrupts (type-2) and only clean up SGI resources when appropriate.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 to before 1ee147efee68be00203b1fee6479911debb1edb2Affected
  • 6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 to before 32bf7c6e01f5ba17a53ba236a770bd0274cefdf4Affected
  • 6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 to before bb160e791ab15b89188a7a19589b8e11f681bef3Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.54 through 6.12.*Not affected
  • 6.17.4 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.