CVE-2025-40180: linux
Vulnerability summary
CVE-2025-40180 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 30 · Related 30Timeline
- 12-11-2025PublishedVulnerability first disclosed.
- 21-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent accessing memory beyond the allocated array bounds.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
11%
Versus all other CVEs
30-day change
+0.01 pp
From 0.20% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu150 products
- linuxAll versions (No fix recorded) | < 6.8.0-106.106 | < 6.17.0-14.14
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 6.8.0-1050.53 | < 6.17.0-1007.7
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linuxAll versions (No fix recorded) | < 6.12.57-1 | < 6.17.6-1
Linux1 product
- linux≥ 4981b82ba2ff87df6a711fcd7a233c615df5fc79, < 47a92030422d09c2de0633d23f660a65b717f008 | ≥ 4981b82ba2ff87df6a711fcd7a233c615df5fc79, < cd0cbf2713f6e027ebba867cb7409ae345a31312 | ≥ 4981b82ba2ff87df6a711fcd7a233c615df5fc79, < ab96f08ecedd263ecaab9df8455bfb23b07fdcc2 | ≥ 4981b82ba2ff87df6a711fcd7a233c615df5fc79, < 0aead8197fc1a85b0a89646e418feb49a564b029 | 5.1
3 vendors · 152 products
