cve 2025 40180

The Linux kernel has been updated to close CVE-2025-40180, a local vulnerability in the Xilinx ZynqMP IPI mailbox driver where a cleanup loop started at the wrong array index and could read or write past the end of an allocated array — a classic out‑of‑bounds access that maintainers fixed with a...