CVE-2025-40180

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2025-11-12 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent accessing memory beyond the allocated array bounds.

Affected Software (6)

VendorProductVersion
Linux Linux 4981b82ba2ff87df6a711fcd7a233c615df5fc79 < b91951f76be14a393439c7063974b4d26f3cb64f
Linux Linux 4981b82ba2ff87df6a711fcd7a233c615df5fc79 < 47a92030422d09c2de0633d23f660a65b717f008
Linux Linux 4981b82ba2ff87df6a711fcd7a233c615df5fc79 < cd0cbf2713f6e027ebba867cb7409ae345a31312
Linux Linux 4981b82ba2ff87df6a711fcd7a233c615df5fc79 < ab96f08ecedd263ecaab9df8455bfb23b07fdcc2
Linux Linux 4981b82ba2ff87df6a711fcd7a233c615df5fc79 < 0aead8197fc1a85b0a89646e418feb49a564b029
Linux Linux 5.1

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.25%
Raw Score 0.002490
Percentile 16.2%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00249
2026-10-31
0.00249
2026-10-30
0.00249
2026-10-29
0.00249

Intelligence Sources

mitre ref →
nvd ref →