CVE-2026-81005

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

UBUNTU-CVE-2026-81005

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

EUVD-2026-76328

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

CVE-2026-81005

CVE-2026-81005 affects the Linux kernel IPMI SI driver (ipmi_si). When BMC registration fails—typically because the BMC does not return a successful response to the Get Device ID command—the shutdown_smi() callback frees the si_sm pointer and sets it to NULL , but the intf->in_shutdown flag is...

CVE-2026-81005 ipmi: si: Fix NULL pointer dereference after failed registration

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

CVE-2026-81005

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

CVE-2025-15679

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679 BMC root account active without password on BullSequana XH3406 and XH3515

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679 BMC root account active without password on BullSequana XH3406 and XH3515

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679

CVE-2025-15679 affects the BMC (Baseboard Management Controller) root account , which can become active without a password under certain circumstances such as a reset to factory default operation. This grants unauthenticated local access with HIGH impact on confidentiality, integrity, and availab...

EUVD-2025-210890

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

CVE-2025-15679: Empty Password in Configuration File

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...

PT-2026-90135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the IPMI system interface si during a failed registration process. When try smi init fails to obtain the BMC device information via bmc get device id...

CVE-2026-81005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

PT-2026-89807

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password...

MAL-2026-16026 Malicious code in bmc-translate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e2a625f0b96f6903cccac0251c6b8380cf9589a1f222e9de7e97dbf466156 package.json declares a preinstall script bun run index.js. index.js is a 500 KB javascript-obfuscator-packed module rotated string array 0x71ec,...

MAL-2026-16025 Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...

Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...

Malicious code in bmc-translate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e2a625f0b96f6903cccac0251c6b8380cf9589a1f222e9de7e97dbf466156 package.json declares a preinstall script bun run index.js. index.js is a 500 KB javascript-obfuscator-packed module rotated string array 0x71ec,...

Embedded Malicious Code

Overview bmc-i18n-extract-cli is a 这是一款能够自动将代码里的中文转成i18n国际化标记的命令行工具。当然，你也可以用它实现将中文语言包自动翻译成其他语言。适用于vue2、vue3和react Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple packages maintained by...