Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Rocky Linux freeipmi can let attackers run code
published 8 days ago
Summary
The freeipmi tool used for remote server management on Rocky Linux has several flaws that could let a malicious user send specially crafted data and cause the program to run unwanted code or crash. This could give an attacker control over the affected system or make it unavailable. Install the updated freeipmi package (version 1.6.20 or later) as soon as possible to remove these risks.
What to do
- Update rocky freeipmi to version 0:1.6.20-1.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Rocky Linux:8 | rocky | freeipmi |
< 0:1.6.20-1.el8_10 Fix: upgrade to 0:1.6.20-1.el8_10
|
Original advisory text
Moderate: freeipmi security, bug fix, and enhancement update
The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.
Security Fix(es):
* FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)
* FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)
* freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)
Bug Fix(es) and Enhancement(s):
* Update freeipmi to 1.6.20 to fix two potential buffer overflows [rhel-8.10.z] (JIRA:Rocky Linux-279519)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)
* FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)
* freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)
Bug Fix(es) and Enhancement(s):
* Update freeipmi to 1.6.20 to fix two potential buffer overflows [rhel-8.10.z] (JIRA:Rocky Linux-279519)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://errata.rockylinux.org/RLSA-2026:89754 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528390 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528396 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528398 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528399 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528400 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2528401 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:89754 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
RLSA-2026:89754 · OSV
Track software like this
Free during beta