The vulnerability of the IPMI management tools such as ipmi-sensors, ipmipower, client, OEM, and ipmi-oem allows a malicious actor to trigger a service failure due to buffer overflow.

The vulnerability of the IPMI management tools such as ipmi-sensors, ipmipower, client, OEM, and ipmi-oem relates to buffer overflow attacks on the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure remotely...

SUSE CVE-2026-72042

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg drops it again. If event delivery fails after allocating receive messag...

SUSE CVE-2026-72040

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in iipmirequest When a caller provides a suppliedrecv message to iipmirequest, the function increments the user's nrmsgs reference count. If an error occurs later, the outerr cleanup path only frees the...

Astra Linux - Vulnerability in linux-5.10

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg releases it. If event delivery fails after allocating receive messages...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fixed the reference count leak in iipmirequest. When a caller provides a suppliedrecv message to iipmirequest, the function increments the user’s nrmsgs reference count. If an error occurs later, the cleanup process for...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102026 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data siz...

CVE-2026-72040

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. When a caller provides a message to the iipmirequest function, a reference count is incremented. However, if an error occurs during this process, the reference count is not properly decremented,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101995 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmi:si: Return state to normal if message allocation fails There were places where nothing would...

CVE-2026-72042

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. An issue in the event delivery mechanism, specifically a reference count underflow, can lead to a use-after-free vulnerability. This occurs when a user's reference count is prematurely decremented...

The vulnerability in the driver/char/ipmi/ipmi_ipmb.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/char/ipmi/ipmiipmb.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2026-72042

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg drops it again. If event delivery fails after allocating receive messag...

CVE-2026-72040

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in iipmirequest When a caller provides a suppliedrecv message to iipmirequest, the function increments the user's nrmsgs reference count. If an error occurs later, the outerr cleanup path only frees the...

AZL-96366 CVE-2026-72042 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg drops it again. If event delivery fails after allocating receive messag...

CVE-2026-72042

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg drops it again. If event delivery fails after allocating receive messag...

UBUNTU-CVE-2026-72042

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg drops it again. If event delivery fails after allocating receive messag...

CVE-2026-72040

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in iipmirequest When a caller provides a suppliedrecv message to iipmirequest, the function increments the user's nrmsgs reference count. If an error occurs later, the outerr cleanup path only frees the...

UBUNTU-CVE-2026-72040

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in iipmirequest When a caller provides a suppliedrecv message to iipmirequest, the function increments the user's nrmsgs reference count. If an error occurs later, the outerr cleanup path only frees the...

CVE-2026-72042 ipmi: Fix user refcount underflow in event delivery

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg drops it again. If event delivery fails after allocating receive messag...

CVE-2026-72042

The CVE-2026-72042 entry describes a Linux kernel vulnerability in the IPMI event delivery path. The issue stems from ipmi_alloc_recv_msg(user) taking a temporary user reference and ipmi_free_recv_msg() dropping it again; during rollback, an extra reference drop could free a user still linked in ...

EUVD-2026-59000

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event delivery ipmiallocrecvmsguser takes the temporary user reference owned by the receive message, and ipmifreerecvmsg drops it again. If event delivery fails after allocating receive messag...