CVE-2026-81007
In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fi
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Sep 11, 2026 · Last modified: Sep 11, 2026
Not enough EPSS history yet.
In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validating the length byte. A zero or short write can read uninitialized stack bytes. A length smaller than the SMBus header underflows the block write length. Require a non-empty buffer and the minimum IPMB request length. Also require the length byte plus payload before parsing the message.
- git.kernel.orghttps://git.kernel.org/stable/c/53637506884dbd5c91a89b1a3547d99d80f8ed2c
- git.kernel.orghttps://git.kernel.org/stable/c/5719431ca2b5fa26560bb38f6202f8b97fa3bbb0
- git.kernel.orghttps://git.kernel.org/stable/c/60939bcda6f3f104ef456fdbf3cc5733c0720fb1
- git.kernel.orghttps://git.kernel.org/stable/c/a84c6e3d188f2c6e674910929eb790634299d6d5
No related CVEs by CWE or product.