CVE-2025-40180

{
  "id": "CVE-2025-40180",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2025-11-12T22:15:44.737",
  "lastModified": "2026-10-30T13:18:14.400",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop\n\nThe cleanup loop was starting at the wrong array index, causing\nout-of-bounds access.\nStart the loop at the correct index for zero-indexed arrays to prevent\naccessing memory beyond the allocated array bounds."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmailbox: zynqmp-ipi: Corrección de acceso fuera de límites en el bucle de limpieza del buzón\n\nEl bucle de limpieza estaba comenzando en el índice de array incorrecto, causando acceso fuera de límites.\nIniciar el bucle en el índice correcto para arrays con índice cero para evitar acceder a memoria más allá de los límites del array asignado."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/mailbox/zynqmp-ipi-mailbox.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "4981b82ba2ff87df6a711fcd7a233c615df5fc79",
              "lessThan": "b91951f76be14a393439c7063974b4d26f3cb64f",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "4981b82ba2ff87df6a711fcd7a233c615df5fc79",
              "lessThan": "47a92030422d09c2de0633d23f660a65b717f008",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "4981b82ba2ff87df6a711fcd7a233c615df5fc79",
              "lessThan": "cd0cbf2713f6e027ebba867cb7409ae345a31312",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "4981b82ba2ff87df6a711fcd7a233c615df5fc79",
              "lessThan": "ab96f08ecedd263ecaab9df8455bfb23b07fdcc2",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "4981b82ba2ff87df6a711fcd7a233c615df5fc79",
              "lessThan": "0aead8197fc1a85b0a89646e418feb49a564b029",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/mailbox/zynqmp-ipi-mailbox.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "5.1",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "5.1",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.1.191",
              "lessThanOrEqual": "6.1.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.160",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.54",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.17.4",
              "lessThanOrEqual": "6.17.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/0aead8197fc1a85b0a89646e418feb49a564b029",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/47a92030422d09c2de0633d23f660a65b717f008",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ab96f08ecedd263ecaab9df8455bfb23b07fdcc2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b91951f76be14a393439c7063974b4d26f3cb64f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/cd0cbf2713f6e027ebba867cb7409ae345a31312",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}