CVE-2026-46044

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped. So make sure the kthread is stopped on an error condition if it is running.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/549607af66a0efdb41307ba6343eed31de8b133e	Patch
https://git.kernel.org/stable/c/75c486cb1bcaa1a3ec3a6438498176a3a4998ae4	Patch
https://git.kernel.org/stable/c/800febc637d1c1974b1e899dea8a07e115d60766	Patch
https://git.kernel.org/stable/c/858bc8b9edb6eaf0522900128bb9053e2df6b0f6	Patch
https://git.kernel.org/stable/c/d6855a3b15851061c817506492b6aa0b605cff1e
https://git.kernel.org/stable/c/e662be2d0d05253d0fd7deda9771aa036c23393e
https://git.kernel.org/stable/c/f2d0a3ede5ebf404d4c334a1f04ef439e0086857	Patch
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

21 Oct 2026, 13:19

Type	Values Removed	Values Added
References		() https://git.kernel.org/stable/c/d6855a3b15851061c817506492b6aa0b605cff1e -

15 Oct 2026, 02:19

Type	Values Removed	Values Added
References		() https://cert-portal.siemens.com/productcert/html/ssa-784472.html -

Information

Published : 2026-05-27 14:17

Updated : 2026-10-21 13:19

NVD link : CVE-2026-46044

Mitre link : CVE-2026-46044

CVE.ORG link : CVE-2026-46044

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2026-46044", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "259307074bfcf1ff88016e12c68f057aee6cb694", "lessThan": "549607af66a0efdb41307ba6343eed31de8b133e", "versionType": "git"}, {"status": "affected", "version": "259307074bfcf1ff88016e12c68f057aee6cb694", "lessThan": "f2d0a3ede5ebf404d4c334a1f04ef439e0086857", "versionType": "git"}, {"status": "affected", "version": "259307074bfcf1ff88016e12c68f057aee6cb694", "lessThan": "e662be2d0d05253d0fd7deda9771aa036c23393e", "versionType": "git"}, {"status": "affected", "version": "259307074bfcf1ff88016e12c68f057aee6cb694", "lessThan": "d6855a3b15851061c817506492b6aa0b605cff1e", "versionType": "git"}, {"status": "affected", "version": "259307074bfcf1ff88016e12c68f057aee6cb694", "lessThan": "858bc8b9edb6eaf0522900128bb9053e2df6b0f6", "versionType": "git"}, {"status": "affected", "version": "259307074bfcf1ff88016e12c68f057aee6cb694", "lessThan": "800febc637d1c1974b1e899dea8a07e115d60766", "versionType": "git"}, {"status": "affected", "version": "259307074bfcf1ff88016e12c68f057aee6cb694", "lessThan": "75c486cb1bcaa1a3ec3a6438498176a3a4998ae4", "versionType": "git"}], "programFiles": ["drivers/char/ipmi/ipmi_ssif.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.19"}, {"status": "unaffected", "version": "0", "lessThan": "3.19", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.258", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.209", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.176", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.12.114", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.27", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.0.4", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/char/ipmi/ipmi_ssif.c"], "defaultStatus": "affected"}]}, {"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "affectedData": [{"vendor": "Siemens", "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2026-05-27T14:17:23.853", "references": [{"url": "https://git.kernel.org/stable/c/549607af66a0efdb41307ba6343eed31de8b133e", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/75c486cb1bcaa1a3ec3a6438498176a3a4998ae4", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/800febc637d1c1974b1e899dea8a07e115d60766", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/858bc8b9edb6eaf0522900128bb9053e2df6b0f6", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d6855a3b15851061c817506492b6aa0b605cff1e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e662be2d0d05253d0fd7deda9771aa036c23393e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f2d0a3ede5ebf404d4c334a1f04ef439e0086857", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html", "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi:ssif: Clean up kthread on errors\n\nIf an error occurs after the ssif kthread is created, but before the\nmain IPMI code starts the ssif interface, the ssif kthread will not\nbe stopped.\n\nSo make sure the kthread is stopped on an error condition if it is\nrunning."}], "lastModified": "2026-10-21T13:19:02.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62BEB848-DA36-437D-BE81-009427982D1A", "versionEndExcluding": "5.10.258", "versionStartIncluding": "3.19"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "919C10A9-7951-4A74-BADD-C135A0A8D8B4", "versionEndExcluding": "5.15.209", "versionStartIncluding": "5.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8ACCD5C-0F15-4B5A-B287-D04F25C2257A", "versionEndExcluding": "6.18.27", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3", "versionEndExcluding": "7.0.4", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}