CVE-2025-40161: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind
In the Linux kernel, the following vulnerability has been resolved:
mailbox: zynqmp-ipi: Fix SGI cleanup on unbind
The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number < 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to kernel crash.
Add explicit irqtype field to pdata for reliable identification of SGI interrupts (type-2) and only clean up SGI resources when appropriate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40161?
The severity of CVE-2025-40161 is classified as medium due to potential risks associated with improper SGI cleanups.
How do I fix CVE-2025-40161?
To fix CVE-2025-40161, update to the latest version of the Linux kernel where the vulnerability is patched.
What systems are affected by CVE-2025-40161?
CVE-2025-40161 affects the Linux kernel implementations that utilize the zynqmp-ipi mailbox driver.
What potential impact does CVE-2025-40161 have?
CVE-2025-40161 could lead to system instability due to improper handling of SGI vs SPI interrupts.
When was CVE-2025-40161 published?
CVE-2025-40161 was published following the discovery that the driver had issues with dynamic IRQ allocation.