CVE-2026-85509

A stack-based buffer overflow vulnerability exists in FreeIPMI versions prior to 1.6.19, specifically in the _read_fru_data function, which can be exploited when a Baseboard Management Controller (BMC) returns more data than expected. This critical flaw (CVSS 9.8) could allow an attacker to execute arbitrary code, potentially compromising the affected system. Organizations utilizing FreeIPMI should prioritize patching to mitigate the risk of exploitation.