CVE-2025-40180mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
- —Not scoredno CVSS score yet
- 0.25%Exploitation in 30 daysEPSS · top 84% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent accessing memory beyond the allocated array bounds.
Timeline
ID reserved
By Linux
- 7 months later
· 7 months later
Published
- 12 months later
· 12 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.25% · top 84% of all CVEs (15 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 4981b82ba2ff87df6a711fcd7a233c615df5fc79 – < b91951f76be14a393439c7063974b4d26f3cb64f
- affected 4981b82ba2ff87df6a711fcd7a233c615df5fc79 – < 47a92030422d09c2de0633d23f660a65b717f008
- affected 4981b82ba2ff87df6a711fcd7a233c615df5fc79 – < cd0cbf2713f6e027ebba867cb7409ae345a31312
- affected 4981b82ba2ff87df6a711fcd7a233c615df5fc79 – < ab96f08ecedd263ecaab9df8455bfb23b07fdcc2
- affected 4981b82ba2ff87df6a711fcd7a233c615df5fc79 – < 0aead8197fc1a85b0a89646e418feb49a564b029
- affected 5.1
- unaffected < 5.1
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.160 – ≤ 6.6.*
- unaffected 6.12.54 – ≤ 6.12.*
- unaffected 6.17.4 – ≤ 6.17.*
- unaffected 6.18 – ≤ *
References
References5
- https://git.kernel.org/stable/c/b91951f76be14a393439c7063974b4d26f3cb64f (opens in a new tab)
- https://git.kernel.org/stable/c/47a92030422d09c2de0633d23f660a65b717f008 (opens in a new tab)
- https://git.kernel.org/stable/c/cd0cbf2713f6e027ebba867cb7409ae345a31312 (opens in a new tab)
- https://git.kernel.org/stable/c/ab96f08ecedd263ecaab9df8455bfb23b07fdcc2 (opens in a new tab)
- https://git.kernel.org/stable/c/0aead8197fc1a85b0a89646e418feb49a564b029 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-150394 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-40180)Record last updated .