CVE-2026-46128
Description
A flaw was found in the Linux kernel's Intelligent Platform Management Interface (IPMI) subsystem. This vulnerability occurs when the kernel processes event message buffer responses from Baseboard Management Controllers (BMCs). Some BMCs may return an empty message instead of an expected error, which the kernel did not properly handle. This could lead to unexpected behavior or system instability due to improper data processing.
Understanding the Weakness (CWE)
Integrity,Other
Technical Impact: Varies by Context; Unexpected State; Alter Execution Logic
An attacker could utilize an ignored error condition to place the system in an unexpected state that could lead to the execution of unintended logic and could cause other unintended behavior.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
