UNKNOWN NVD
CVE-2026-81007
In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validati
In the Linux kernel, the following vulnerability has been resolved:
ipmi: ipmb: validate write message length
ipmb_write() read message fields before validating the length byte.
A zero or short write can read uninitialized stack bytes.
A length smaller than the SMBus header underflows the block write length.
Require a non-empty buffer and the minimum IPMB request length.
Also require the length byte plus payload before parsing the message.
References
- https://git.kernel.org/stable/c/53637506884dbd5c91a89b1a3547d99d80f8ed2c
- https://git.kernel.org/stable/c/5719431ca2b5fa26560bb38f6202f8b97fa3bbb0
- https://git.kernel.org/stable/c/60939bcda6f3f104ef456fdbf3cc5733c0720fb1
- https://git.kernel.org/stable/c/a84c6e3d188f2c6e674910929eb790634299d6d5
This unknown severity vulnerability was published on 2026-09-11 via NVD.
vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.