USN-8843-1: FreeIPMI vulnerabilities
Ubuntu patches FreeIPMI flaws that a malicious IPMI device could use for crashes or code execution.
Ubuntu Security Notice USN-8843-1 covers FreeIPMI vulnerabilities triggered by malicious IPMI devices. CVE-2026-85504 is a stack-based buffer overflow in handling malformed Fujitsu SEL long-text responses that could crash FreeIPMI or possibly allow arbitrary code execution. CVE-2026-85505 is a stack-based buffer over-read when retrieving short Fujitsu SEL entries that could cause a denial of service. The provided notice text is truncated after those two issues, and no active exploitation is described.
- CVE-2026-85504 is a stack overflow that may crash FreeIPMI or run code.
- CVE-2026-85505 is a stack over-read that can cause a denial of service.
- Exploitation requires control of a malicious IPMI device.
- The notice does not report in-the-wild exploitation.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-85504 | Stack-based buffer overflow in FreeIPMI via malformed Fujitsu iRMC SEL responses | 9.8 | <1% | ||
| CVE-2026-85505 | Stack buffer over-read in FreeIPMI ipmi-oem Fujitsu SEL handling (fixed in 1.6.19) | 7.5 | <1% |
From the original article
It was discovered that FreeIPMI incorrectly handled certain malformed Fujitsu SEL long-text responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibly execute arbitrary code.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.