Out-of-Bounds Access Issue in Linux Kernel's Mailbox Cleanup Loop

CVE-2025-40180

What is CVE-2025-40180?

A vulnerability in the Linux kernel's mailbox cleanup process allows for out-of-bounds access due to improper indexing in the cleanup loop. This issue arises because the loop does not start at the correct zero-based index, potentially leading to memory being accessed beyond allocated bounds. This can create security risks as it opens doors for unauthorized memory access and could lead to system instability or exposure of sensitive data. Users are advised to apply the latest security updates to prevent such vulnerabilities.

References