CVE-2026-46044

Analyzed Analyzed - Analysis Complete

SSIF kthread Cleanup Flaw in Linux Kernel

Publication date: 2026-05-27

Last updated on: 2026-06-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped. So make sure the kthread is stopped on an error condition if it is running.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-19

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-46044

EUVD

EUVD-2026-32426

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.11 (inc) to 5.15.209 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.4 (exc)
linux	linux_kernel	From 3.19 (inc) to 5.10.258 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.18.27 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability occurs in the Linux kernel's IPMI ssif interface. If an error happens after the ssif kernel thread (kthread) is created but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped properly.

The issue is that the kthread continues running even though an error condition has occurred, which should have caused it to stop.

Impact Analysis

If the ssif kthread is not stopped on error, it may lead to resource leaks or unexpected behavior in the IPMI subsystem of the Linux kernel.

This could potentially cause system instability or degraded performance due to lingering kernel threads that should have been terminated.

Hi! I’m here to help you understand CVE-2026-46044. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70