CVE-2026-43221 PUBLISHED

ipmi: ipmb: initialise event handler read bytes

Assigner: Linux
Reserved: 01.05.2026 Published: 06.05.2026 Updated: 06.05.2026

In the Linux kernel, the following vulnerability has been resolved:

ipmi: ipmb: initialise event handler read bytes

IPMB doesn't use i2c reads, but the handler needs to set a value. Otherwise an i2c read will return an uninitialised value from the bus driver.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 63c4eb347164845b380089012fe43992511c0ad3 to 905554ebd76aeee370bfd5136ea11e0b9d75c6f1 (excl.)
  • affected from 63c4eb347164845b380089012fe43992511c0ad3 to 56d5c0557e53c4d8d92a619fa83eaae178165e07 (excl.)
  • affected from 63c4eb347164845b380089012fe43992511c0ad3 to 2dfbc8c17dd161885336e77e71c336cd62cf6748 (excl.)
  • affected from 63c4eb347164845b380089012fe43992511c0ad3 to f726b3a57e00bb6249c67714c11ae8b4b31719a1 (excl.)
  • affected from 63c4eb347164845b380089012fe43992511c0ad3 to 102712417bb6aa9a00d852bc59cb0a276db486c4 (excl.)
  • affected from 63c4eb347164845b380089012fe43992511c0ad3 to 9f235ccecd03c436cb1683eac16b12f119e54aa9 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.16 is affected
  • unaffected from 0 to 5.16 (excl.)
  • unaffected from 6.1.165 to 6.1.* (incl.)
  • unaffected from 6.6.128 to 6.6.* (incl.)
  • unaffected from 6.12.75 to 6.12.* (incl.)
  • unaffected from 6.18.16 to 6.18.* (incl.)
  • unaffected from 6.19.6 to 6.19.* (incl.)
  • unaffected from 7.0 to * (incl.)

References