Riskcovery

CVE-2026-81006

ipmi: Remove all sysfs files on registration failure

State
Published
Severity
7.8 High
Published
Sep 11, 2026
Updated
Oct 19, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ipmi: Remove all sysfs files on registration failure

ipmi_add_smi() creates the nr_users and nr_msgs files before trying to create the maintenance_mode file. If that last creation fails, the error path removes only nr_users before dropping the final reference to the interface.

Remove nr_msgs as well so no sysfs attribute embedded in the freed interface remains registered.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 627118470fccc61d7763aa667fcab0a9476843f6 to before d46c97eddcbc53ca885e8bb359930c58884616ffAffected
  • 627118470fccc61d7763aa667fcab0a9476843f6 to before b115b7d06f26b3f000d2afda88acb54c7a7cb2c9Affected
  • 627118470fccc61d7763aa667fcab0a9476843f6 to before b6c46ab0bdee90c238e96ea4a74972118c97900dAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.