CVE-2026-46044: ipmi:ssif: Clean up kthread on errors
In the Linux kernel, the following vulnerability has been resolved:
ipmi:ssif: Clean up kthread on errors
If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped.
So make sure the kthread is stopped on an error condition if it is running.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Ensure the IPMI SSIF kthread is stopped when an error occurs after the kthread is created but before the SSIF interface is fully started.
Event History
Frequently Asked Questions
What conditions are required to trigger this issue?
An error must occur after the SSIF kernel thread has been created but before the main IPMI code starts the SSIF interface. Exploitation requires local access and low privileges, according to the supplied CVSS vector.
What is the impact if the issue is triggered?
The SSIF kernel thread is not stopped on the affected error path. The reported security impact is availability only; confidentiality and integrity are not affected.
Is user interaction required?
No. The CVSS vector indicates that no user interaction is required.
What mitigation is indicated when patching is not immediately possible?
No specific workaround or configuration mitigation is provided. The described fix ensures that a running SSIF kernel thread is stopped when an error condition occurs.