Not yet scoredPublished Nov 12, 2025

CVE-2025-40161mailbox: zynqmp-ipi: Fix SGI cleanup on unbind

Updated under an hour ago (Oct 28, 2026, 12:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number < 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to kernel crash. Add explicit irq_type field to pdata for reliable identification of SGI interrupts (type-2) and only clean up SGI resources when appropriate.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 builds before 1ee147efee68be00203b1fee6479911debb1edb2; from 6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 before 32bf7c6e01f5ba17a53ba236a770bd0274cefdf4; from 6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 before bb160e791ab15b89188a7a19589b8e11f681bef3	CNA record

References

References

https://git.kernel.org/stable/c/1ee147efee68be00203b1fee6479911debb1edb2
https://git.kernel.org/stable/c/32bf7c6e01f5ba17a53ba236a770bd0274cefdf4
https://git.kernel.org/stable/c/bb160e791ab15b89188a7a19589b8e11f681bef3

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.