CVE-2026-81004

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an IPMI interface, it may have scheduled work to run. The work needs to be canceled before the interface can be freed.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/99692252b348c11377fd0cdd66b6b18f3b22758e
https://git.kernel.org/stable/c/a496c51dd3257ed7e00873af2ad9bb22c3ddc4cf
https://git.kernel.org/stable/c/ae84a2536577057e97f23f75a202e26d0e86cf01

Configurations

No configuration.

History

No history.

Information

Published : 2026-09-11 20:19

Updated : 2026-09-13 07:17

NVD link : CVE-2026-81004

Mitre link : CVE-2026-81004

CVE.ORG link : CVE-2026-81004

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-81004", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "edb6c2118293c1fba9cd11ca80ed043d2411a7e5", "lessThan": "99692252b348c11377fd0cdd66b6b18f3b22758e", "versionType": "git"}, {"status": "affected", "version": "62cd145453d577113f993efd025f258dd86aa183", "lessThan": "a496c51dd3257ed7e00873af2ad9bb22c3ddc4cf", "versionType": "git"}, {"status": "affected", "version": "62cd145453d577113f993efd025f258dd86aa183", "lessThan": "ae84a2536577057e97f23f75a202e26d0e86cf01", "versionType": "git"}, {"status": "affected", "version": "5199fc5dc9c519115457406009fcefd50721c995", "versionType": "git"}, {"status": "affected", "version": "6.18.20", "lessThan": "6.18.50", "versionType": "semver"}, {"status": "affected", "version": "6.19.10", "lessThan": "6.20", "versionType": "semver"}], "programFiles": ["drivers/char/ipmi/ipmi_msghandler.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "7.0"}, {"status": "unaffected", "version": "0", "lessThan": "7.0", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.50", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.2.4", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/char/ipmi/ipmi_msghandler.c"], "defaultStatus": "affected"}]}], "published": "2026-09-11T20:19:09.057", "references": [{"url": "https://git.kernel.org/stable/c/99692252b348c11377fd0cdd66b6b18f3b22758e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a496c51dd3257ed7e00873af2ad9bb22c3ddc4cf", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ae84a2536577057e97f23f75a202e26d0e86cf01", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi:msghandler: Cancel work cleanly on an error\n\nIf an error occurs during startup of an IPMI interface, it may have\nscheduled work to run. The work needs to be canceled before the\ninterface can be freed."}], "lastModified": "2026-09-13T07:17:07.157", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}