CVE-2026-81006

Received Received - Intake

ipmi: sysfs cleanup failure leads to dangling attributes

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users and nr_msgs files before trying to create the maintenance_mode file. If that last creation fails, the error path removes only nr_users before dropping the final reference to the interface. Remove nr_msgs as well so no sysfs attribute embedded in the freed interface remains registered.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-81006

EUVD

EUVD-2026-76329

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper cleanup of sysfs files when IPMI (Intelligent Platform Management Interface) registration fails. During registration, files like nr_users and nr_msgs are created before maintenance_mode. If maintenance_mode creation fails, the error path only removes nr_users, leaving nr_msgs registered. This can lead to dangling sysfs attributes linked to freed memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's IPMI subsystem and may not have direct network detection methods. Check kernel logs for IPMI-related errors during module initialization using 'dmesg | grep ipmi' or 'journalctl -k | grep ipmi'.

Impact Analysis

This flaw could allow local attackers to cause a system crash or trigger undefined behavior by exploiting the dangling sysfs attributes. It may also lead to information leaks or privilege escalation if exploited maliciously.

Mitigation Strategies

Update your Linux kernel to the patched version that includes the fix for this issue. Monitor kernel logs for IPMI-related errors after applying updates.

Hi! I’m here to help you understand CVE-2026-81006. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70