CVE-2026-81007

Received Received - Intake

ipmi: ipmb_write() Message Length Validation Flaw

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validating the length byte. A zero or short write can read uninitialized stack bytes. A length smaller than the SMBus header underflows the block write length. Require a non-empty buffer and the minimum IPMB request length. Also require the length byte plus payload before parsing the message.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-81007

EUVD

EUVD-2026-76330

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the ipmi: ipmb component where ipmb_write() reads message fields before validating the length byte. This can lead to reading uninitialized stack bytes if a zero or short write occurs. Additionally, a length smaller than the SMBus header can underflow the block write length.

Detection Guidance

This vulnerability is specific to the Linux kernel's IPMI IPMB implementation. Detection requires checking kernel logs for IPMI-related errors or stack corruption warnings. Monitor for crashes or unusual behavior in IPMI subsystems. No direct commands are provided in the context to detect this issue.

Impact Analysis

An attacker could exploit this to read sensitive data from kernel memory, potentially leading to information disclosure or privilege escalation. Systems using the affected Linux kernel component may be at risk of unauthorized access or data leaks.

Mitigation Strategies

Apply the latest Linux kernel patches that address this vulnerability. If patches are unavailable, disable the IPMI IPMB functionality if not required. Monitor vendor advisories for updates and test patches in a non-production environment before deployment.

Hi! I’m here to help you understand CVE-2026-81007. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70