CVE-2026-85509: Buffer Overflow
FreeIPMI before 1.6.19 has a stack-based buffer overflow in readfrudata in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.6.19-1 - Upgrade
Upgrade
debian/freeipmito a version that resolves this vulnerability.Fixed in 1.6.19-1 - Upgrade
Upgrade
FreeIPMIto a version that resolves this vulnerability.Fixed in 1.6.19
Event History
Frequently Asked Questions
What level of access is required to exploit this issue?
The vulnerability is network-reachable and requires neither privileges nor user interaction. Exploitation depends on a BMC returning more FRU data bytes than requested.
Which FreeIPMI versions are affected?
FreeIPMI versions before 1.6.19 are affected. Updating to version 1.6.19 or later removes systems from the stated affected version range.
How severe could successful exploitation be?
The reported CVSS vector rates it critical at 9.8 and indicates potential high impact to confidentiality, integrity, and availability.