VDB

CVE-2026-81006

CVE-2026-81006 PUBLISHED CVSS 7.8 HIGH

Reported by Linux · Published September 11, 2026

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users and nr_msgs files before trying to create the maintenance_mode file. If that last creation fails, the error path removes only nr_users before dropping the final reference to the interface. Remove nr_msgs as well so no sysfs attribute embedded in the freed interface remains registered.

EPSS 0.13% · 2.7th percentile

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.13%
2.7th percentile

Affected Products

VendorProductVersions
LinuxLinux627118470fccc61d7763aa667fcab0a9476843f6, 627118470fccc61d7763aa667fcab0a9476843f6, 627118470fccc61d7763aa667fcab0a9476843f6
LinuxLinux6.18, 0, 6.18.50
linuxlinux_kernel6.18, 6.18, 6.18
LinuxLinux627118470fccc61d7763aa667fcab0a9476843f6, 627118470fccc61d7763aa667fcab0a9476843f6, 627118470fccc61d7763aa667fcab0a9476843f6

Timeline

  • Sep 11, 2026 CVE Published
  • Sep 12, 2026 EPSS Score
  • Sep 12, 2026 Coalition ESS Score
  • Sep 13, 2026 EPSS Score
  • Sep 13, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›