CVE-2025-40180

Source
https://cve.org/CVERecord?id=CVE-2025-40180
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40180.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-40180
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
openSUSE (1)
ROOT (5)
SUSE (14)
UBUNTU (1)
Related
Published
2025-11-12T21:56:25Z
Modified
2026-10-22T02:47:49Z
Summary
mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
Details

In the Linux kernel, the following vulnerability has been resolved:

mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent accessing memory beyond the allocated array bounds.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40180.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4981b82ba2ff87df6a711fcd7a233c615df5fc79
Fixed
47a92030422d09c2de0633d23f660a65b717f008
Fixed
cd0cbf2713f6e027ebba867cb7409ae345a31312
Fixed
ab96f08ecedd263ecaab9df8455bfb23b07fdcc2
Fixed
0aead8197fc1a85b0a89646e418feb49a564b029

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40180.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.1.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.54
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40180.json"