CVE-2026-81007

🗓️ 11 Sep 2026 19:42:58Reported by LinuxType

Missing length validation in Linux kernel IPMB write enables stack read or length underflow.

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2026-81007 ipmi: ipmb: validate write message length	11 Sep 202619:42	–	cvelist
Debian CVE	CVE-2026-81007	11 Sep 202619:42	–	debiancve
EUVD	EUVD-2026-76330	11 Sep 202619:42	–	euvd
NVD	CVE-2026-81007	11 Sep 202620:19	–	nvd
OSV	AZL-100478 CVE-2026-81007 affecting package kernel 6.6.150.1-1	11 Sep 202620:19	–	osv
OSV	DEBIAN-CVE-2026-81007	11 Sep 202620:19	–	osv
Positive Technologies	PT-2026-90137	11 Sep 202600:00	–	ptsecurity
UbuntuCve	CVE-2026-81007	14 Sep 202600:00	–	ubuntucve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-81007	12 Sep 202600:00	–	nessus

Vulners

CNA

Node

linux linux_kernelRange5.3–5.10.270

linux linux_kernelRange5.11.0–5.15.221

linux linux_kernelRange5.16.0–6.1.188

linux linux_kernelRange6.2.0–6.6.157

linux linux_kernelRange6.7.0–6.12.109

linux linux_kernelRange6.13.0–6.18.50

linux linux_kernelRange6.19.0–7.2.4

linux linux_kernelRange7.3.0–7.3-rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/char/ipmi/ipmb_dev_int.c"
    ],
    "versions": [
      {
        "version": "51bd6f291583684f495ea498984dfc22049d7fd2",
        "lessThan": "8990c7f6bfc1e7689b7012a7d4d0efb9f07a9c89",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51bd6f291583684f495ea498984dfc22049d7fd2",
        "lessThan": "94f8d20153e348c79bc14dc25f873470518892da",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51bd6f291583684f495ea498984dfc22049d7fd2",
        "lessThan": "e527cd4e80066e1ed070fdc7c705bde340cdcc62",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51bd6f291583684f495ea498984dfc22049d7fd2",
        "lessThan": "7d66d54b974cff0a959e188af844d2d110422767",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51bd6f291583684f495ea498984dfc22049d7fd2",
        "lessThan": "60939bcda6f3f104ef456fdbf3cc5733c0720fb1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51bd6f291583684f495ea498984dfc22049d7fd2",
        "lessThan": "5719431ca2b5fa26560bb38f6202f8b97fa3bbb0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51bd6f291583684f495ea498984dfc22049d7fd2",
        "lessThan": "a84c6e3d188f2c6e674910929eb790634299d6d5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "51bd6f291583684f495ea498984dfc22049d7fd2",
        "lessThan": "53637506884dbd5c91a89b1a3547d99d80f8ed2c",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/char/ipmi/ipmb_dev_int.c"
    ],
    "versions": [
      {
        "version": "5.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.3",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.270",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.109",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.50",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.4",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/a84c6e3d188f2c6e674910929eb790634299d6d5
git	www.git.kernel.org/stable/c/60939bcda6f3f104ef456fdbf3cc5733c0720fb1
git	www.git.kernel.org/stable/c/94f8d20153e348c79bc14dc25f873470518892da
git	www.git.kernel.org/stable/c/7d66d54b974cff0a959e188af844d2d110422767
git	www.git.kernel.org/stable/c/5719431ca2b5fa26560bb38f6202f8b97fa3bbb0
git	www.git.kernel.org/stable/c/53637506884dbd5c91a89b1a3547d99d80f8ed2c
git	www.git.kernel.org/stable/c/e527cd4e80066e1ed070fdc7c705bde340cdcc62
git	www.git.kernel.org/stable/c/8990c7f6bfc1e7689b7012a7d4d0efb9f07a9c89

14 Sep 2026 13:18Current

CVSS 3.17.1

EPSS0.00125