SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-81006

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's IPMI subsystem, specifically during the registration process where certain sysfs files are created. If the creation of the maintenance_mode file fails, the system does not properly remove all previously created files, potentially leading to inconsistencies or unauthorized access to leftover sysfs attributes. Linux administrators and developers managing systems that utilize the IPMI interface should prioritize applying the relevant patches to mitigate potential security risks.

CVE
CVE-2026-81006
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users and nr_msgs files before trying to create the maintenance_mode file. If that last creation fails, the error path removes only nr_users before dropping the final reference to the interface. Remove nr_msgs as well so no sysfs attribute embedded in the freed interface remains registered.