Skip to main content

Linux Kernel EUVDEUVD-2026-27783

| CVE-2026-43221 MEDIUM
Use of Uninitialized Resource (CWE-908)
2026-05-06 Linux GHSA-vqpg-cfxc-r52f
Information Disclosure Linux
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local access with low privilege required to reach IPMB driver; no confidentiality or integrity impact, only availability disruption via uninitialized bus read.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Jul 24, 2026 - 00:59 vuln.today
CVSS changed
May 12, 2026 - 19:22 NVD
5.5 (MEDIUM)
Patch available
May 06, 2026 - 13:32 EUVD
CVE Published
May 06, 2026 - 11:28 nvd
MEDIUM 5.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ipmi: ipmb: initialise event handler read bytes

IPMB doesn't use i2c reads, but the handler needs to set a value. Otherwise an i2c read will return an uninitialised value from the bus driver.

AnalysisAI

Uninitialized read bytes in the Linux kernel IPMI IPMB driver expose systems to a local denial-of-service condition. The IPMB subsystem does not use i2c reads by design, but when an i2c read is triggered through the event handler, an uninitialized value is returned from the underlying bus driver, potentially causing kernel instability or a crash on affected server hardware. No public exploit exists and EPSS is 0.02% (7th percentile), indicating low real-world exploitation probability despite patches being available across multiple stable branches.

Technical ContextAI

The affected component is the Linux kernel's IPMI (Intelligent Platform Management Interface) IPMB (IPMI Message Bridge) driver, identified via CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*. IPMI is a hardware management protocol common in server BMC (Baseboard Management Controller) environments; IPMB is the I2C-based sub-bus used to communicate between IPMI entities. The root cause is CWE-908 (Use of Uninitialized Resource): the event handler for the driver neglects to initialize the i2c read-bytes field. Since IPMB does not ordinarily perform i2c reads, this path is abnormal; when it is reached, the uninitialized stack or heap value is passed directly to the bus driver, resulting in unpredictable behavior. The vulnerability is introduced at commit 63c4eb347164845b380089012fe43992511c0ad3 and persists across multiple stable series until patched.

RemediationAI

The primary remediation is upgrading to a patched Linux kernel version: 6.1.165 or later for the 6.1 LTS branch, 6.6.128 or later for the 6.6 LTS branch, 6.12.75 or later for the 6.12 LTS branch, 6.18.16 or later for the 6.18 branch, 6.19.6 or later for the 6.19 branch, or 7.0 for the mainline series. Ubuntu users should apply USN-8492-1 via standard package management. For Red Hat and SUSE systems, monitor vendor channels for distribution-specific errata as specific advisory URLs were not available in the provided data. As a workaround where patching is not immediately possible, unloading or blacklisting the ipmb kernel module (modprobe -r ipmb; echo 'blacklist ipmb' >> /etc/modprobe.d/ipmb-blacklist.conf) eliminates the vulnerable code path with the trade-off of losing IPMI Message Bridge functionality for BMC-connected management devices. This workaround is appropriate only where IPMB functionality is not actively required.

Same weakness CWE-908 – Use of Uninitialized Resource

View all
CVE-2011-1255 CRITICAL POC
9.3
CVE-2024-50302 MEDIUM
5.5
CVE-2024-12085 HIGH POC
7.5
CVE-2021-1104 CRITICAL POC
9.8
CVE-2021-29937 CRITICAL POC
9.8
CVE-2021-29936 CRITICAL POC
9.8
CVE-2021-26305 CRITICAL POC
9.8
CVE-2019-9641 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

EUVD-2026-27783 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy