Riskcovery

CVE-2025-40180

mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

State
Published
Severity
Not scored
Published
Nov 12, 2025
Updated
Oct 30, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent accessing memory beyond the allocated array bounds.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4981b82ba2ff87df6a711fcd7a233c615df5fc79 to before b91951f76be14a393439c7063974b4d26f3cb64fAffected
  • 4981b82ba2ff87df6a711fcd7a233c615df5fc79 to before 47a92030422d09c2de0633d23f660a65b717f008Affected
  • 4981b82ba2ff87df6a711fcd7a233c615df5fc79 to before cd0cbf2713f6e027ebba867cb7409ae345a31312Affected
  • 4981b82ba2ff87df6a711fcd7a233c615df5fc79 to before ab96f08ecedd263ecaab9df8455bfb23b07fdcc2Affected
  • 4981b82ba2ff87df6a711fcd7a233c615df5fc79 to before 0aead8197fc1a85b0a89646e418feb49a564b029Affected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.54 through 6.12.*Not affected
  • 6.17.4 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.