CVE-2026-81004

Received Received - Intake

IPMI Message Handler Work Cancellation Flaw in Linux Kernel

Publication date: 2026-09-11

Last updated on: 2026-09-13

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-13

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-10-01

NVD

CVE-2026-81004

EUVD

EUVD-2026-76327

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	ipmi	msghandler

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper cleanup when an error occurs during the startup of an IPMI interface. Specifically, if an error happens, the system may schedule work to run but fails to cancel it before freeing the interface, potentially leading to resource leaks or undefined behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's IPMI message handler. Detection involves checking kernel logs for IPMI-related errors during startup. Use commands like 'dmesg | grep -i ipmi' or 'journalctl -k | grep -i ipmi' to review system logs for IPMI interface errors.

Impact Analysis

This vulnerability could cause system instability or crashes if the unscheduled work runs after the IPMI interface is freed. It may lead to resource exhaustion or unexpected behavior in systems relying on IPMI for management tasks.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a Linux kernel IPMI interface cleanup issue. No evidence suggests data exposure or privacy risks.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for IPMI-related errors after updating. If errors persist, disable the IPMI interface temporarily until a patch is applied.

Hi! I’m here to help you understand CVE-2026-81004. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70