CVE-2026-43221

Summary

In the Linux kernel, the following vulnerability has been resolved:

ipmi: ipmb: initialise event handler read bytes

IPMB doesn't use i2c reads, but the handler needs to set a value. Otherwise an i2c read will return an uninitialised value from the bus driver.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux63c4eb347164845b380089012fe43992511c0ad3 < 905554ebd76aeee370bfd5136ea11e0b9d75c6f1affected
LinuxLinux63c4eb347164845b380089012fe43992511c0ad3 < 56d5c0557e53c4d8d92a619fa83eaae178165e07affected
LinuxLinux63c4eb347164845b380089012fe43992511c0ad3 < 2dfbc8c17dd161885336e77e71c336cd62cf6748affected
LinuxLinux63c4eb347164845b380089012fe43992511c0ad3 < f726b3a57e00bb6249c67714c11ae8b4b31719a1affected
LinuxLinux63c4eb347164845b380089012fe43992511c0ad3 < 102712417bb6aa9a00d852bc59cb0a276db486c4affected
LinuxLinux63c4eb347164845b380089012fe43992511c0ad3 < 9f235ccecd03c436cb1683eac16b12f119e54aa9affected
LinuxLinux5.16affected
LinuxLinux0 < 5.16unaffected
LinuxLinux6.1.165 <= 6.1.*unaffected
LinuxLinux6.6.128 <= 6.6.*unaffected
LinuxLinux6.12.75 <= 6.12.*unaffected
LinuxLinux6.18.16 <= 6.18.*unaffected
LinuxLinux6.19.6 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References