Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
FreeIPMI may crash when handling certain Dell and Fujitsu commands
published 3 months ago
Summary
The FreeIPMI utilities included in AlmaLinux can overflow internal memory when processing Dell's get-active-directory-config and Fujitsu's get-sel-entry-long-text commands. This could cause the program to stop working or behave unexpectedly, potentially affecting monitoring or management tasks. Applying the latest package updates for freeipmi and its related components resolves the issue.
What to do
- Update almalinux freeipmi to version 1.6.14-2.el9.tuxcare.els2.
- Update almalinux freeipmi-bmc-watchdog to version 1.6.14-2.el9.tuxcare.els2.
- Update almalinux freeipmi-devel to version 1.6.14-2.el9.tuxcare.els2.
- Update almalinux freeipmi-ipmidetectd to version 1.6.14-2.el9.tuxcare.els2.
- Update almalinux freeipmi-ipmiseld to version 1.6.14-2.el9.tuxcare.els2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.6 | almalinux | freeipmi |
< 1.6.14-2.el9.tuxcare.els2 Fix: upgrade to 1.6.14-2.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.6 | almalinux | freeipmi-bmc-watchdog |
< 1.6.14-2.el9.tuxcare.els2 Fix: upgrade to 1.6.14-2.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.6 | almalinux | freeipmi-devel |
< 1.6.14-2.el9.tuxcare.els2 Fix: upgrade to 1.6.14-2.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.6 | almalinux | freeipmi-ipmidetectd |
< 1.6.14-2.el9.tuxcare.els2 Fix: upgrade to 1.6.14-2.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.6 | almalinux | freeipmi-ipmiseld |
< 1.6.14-2.el9.tuxcare.els2 Fix: upgrade to 1.6.14-2.el9.tuxcare.els2
|
Original advisory text
freeipmi: Fix of CVE-2026-50031
- CVE-2026-50031: fix buffer overflows in ipmi-oem response handling
for dell get-active-directory-config and fujitsu get-sel-entry-long-text
subcommands
for dell get-active-directory-config and fujitsu get-sel-entry-long-text
subcommands
References
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1783597433.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-50031 Vendor Advisory
Timeline
Published9 Jul 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1783597433 · OSV
Track software like this
Free during beta