test_avb_key

On Almost Signing Android Builds Introduction An error sometimes encountered by NCC Group consultants is signing Android builds with known private keys. This leaves the device manufacturers and in turn their users vulnerable, even on devices where secure boot is enabled. This blog post has two...

PT-2026-144562

In multiple functions of oem svc setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for...

AlmaLinux 9.6 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793306623)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793306623 advisory. - ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in...

Rocky Linux 9.6 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793306623)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793306623 advisory. - ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in...

MiracleLinux 9 : freeipmi-1.6.20-1.el9_8 (AXSA:2026-2180:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2180:05 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code...

MiracleLinux 8 : freeipmi-1.6.20-1.el8_10 (AXSA:2026-2192:06)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2192:06 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code...

Rocky Linux 9 [CIQ] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-bmc-watchdog-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89753)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689753 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code execution...

Rocky Linux 10.2 [CIQ] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-bmc-watchdog-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89905)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689905 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code executi...

Rocky Linux 8 [CIQ] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-bmc-watchdog-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89754)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689754 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code execution...

RLSA-2026:89905 Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI:...

freeipmi security, bug fix, and enhancement update

An update is available for freeipmi. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The freeipmi packages contain an Intelligent Platform Management Interface...

RLSA-2026:89753 Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI:...

freeipmi security, bug fix, and enhancement update

An update is available for freeipmi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The freeipmi packages contain an Intelligent Platform Management Interface...

RLSA-2026:89754 Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the IPMI specification. Security Fixes: FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI:...

freeipmi security, bug fix, and enhancement update

An update is available for freeipmi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The freeipmi packages contain an Intelligent Platform Management Interface...

RockyLinux 9 : freeipmi (RLSA-2026:89753)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89753 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code executio...

RockyLinux 8 : freeipmi (RLSA-2026:89754)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89754 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code executio...

RockyLinux 10 : freeipmi (RLSA-2026:89905)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89905 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code executi...

FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem

A stack-based out-of-bounds read vulnerability was found in the FreeIPMI ipmi-oem utility. When processing an abnormally short response from a Baseboard Management Controller BMC, the application over-reads the buffer. A malicious BMC could exploit this to crash the client application Denial of...

FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem

A flaw was found in FreeIPMI. A stack-based buffer overflow in the ipmi-oem utility can lead to arbitrary code execution. This vulnerability can be exploited by a local user who executes a specially crafted ipmi-oem command, potentially when processing untrusted data from a remote source...