CVE-2026-46128 : faille moyenne linux linux kernel (CVSS 5.5)

In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty message instead of an error when fetching events. There are apparently some new BMCs that make this error, so we need to compensate.

Sévérité

Moyenne (CVSS 5.5)

Vecteur CVSS

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitation active

Non signalée par la CISA

Publication

28 mai 2026

Dernière mise à jour

24 juin 2026

• linux linux kernel

• Fiche CVE-2026-46128 sur le NVD (NIST)
• git.kernel.org/stable/c/01f8387fa5b796f13cf50014c171f6da7abc4…
• git.kernel.org/stable/c/2418e4b21fb1355504d095da5d5f0a210564a…
• git.kernel.org/stable/c/24269264c3d59a49eb09b10af2c75b14f2931…
• git.kernel.org/stable/c/36920f30e78e69df01f9691c470b6f3ba8aeb…
• git.kernel.org/stable/c/42432b579a594b66ac32e5e7b7c26e6bc578e…
• git.kernel.org/stable/c/474e53d4397087913a5b9c9eb90fa068da480…
• git.kernel.org/stable/c/7f7ada72c07a83b46045ddfeee526bd9e2e3c…
• git.kernel.org/stable/c/cf1ef30c42a7079e5bad863cd01c52aa3a17c…