CVE-2026-46177
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/05/2026
Última modificación:
30/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ipmi: Add limits to event and receive message requests<br />
<br />
The driver would just fetch events and receive messages until the<br />
BMC said it was done. To avoid issues with BMCs that never say they are<br />
done, add a limit of 10 fetches at a time.<br />
<br />
In addition, an si interface has an attn state it can return from the<br />
hardware which is supposed to cause a flag fetch to see if the driver<br />
needs to fetch events or message or a few other things. If the attn<br />
bit gets stuck, it&#39;s a similar problem. So allow messages in between<br />
flag fetches so the driver itself doesn&#39;t get stuck.<br />
<br />
This is a more general fix than the previous fix for the specific bad<br />
BMC, but should fix the more general issue of a BMC that won&#39;t stop<br />
saying it has data.<br />
<br />
This has been there from the beginning of the driver. It&#39;s not a bug<br />
per-se, but it is accounting for bugs in BMCs.
Impacto
Puntuación base 3.x
7.50
Gravedad 3.x
ALTA
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/3d37d2165df9504ea99d9e6181552dc4d2d1ab37
- https://git.kernel.org/stable/c/67c44e0deba936d5edaebea356b4589eb43acb5c
- https://git.kernel.org/stable/c/c024167fb00489baee08c72182ca2e7dc5fb9f20
- https://git.kernel.org/stable/c/c4cca236968683eb0d59abfb12d5c7e4d8514227
- https://git.kernel.org/stable/c/e20212b431bef217d3886b86bbc90cc3ed00de68



