CVE-2025-40161

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number < 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to kernel crash. Add explicit irq_type field to pdata for reliable identification of SGI interrupts (type-2) and only clean up SGI resources when appropriate.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedNov 12, 2025
First seenNov 12, 2025

How to fix

Update
  • Linux Linux1ee147efee68be00203b1fee6479911debb1edb2, 32bf7c6e01f5ba17a53ba236a770bd0274cefdf4, bb160e791ab15b89188a7a19589b8e11f681bef3 or later

Affected products

ProductAffected versionsFixed in
Linux Linux6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 ≤ v < 1ee147efee68be00203b1fee6479911debb1edb2, 6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 ≤ v < 32bf7c6e01f5ba17a53ba236a770bd0274cefdf4, 6ffb1635341bec50fa9540ae7827d1e5d75ae0b0 ≤ v < bb160e791ab15b89188a7a19589b8e11f681bef3, 6.101ee147efee68be00203b1fee6479911debb1edb2, 32bf7c6e01f5ba17a53ba236a770bd0274cefdf4, bb160e791ab15b89188a7a19589b8e11f681bef3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.