CVE-2026-72042

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the IPMI (Intelligent Platform Management Interface) event delivery mechanism. The function handle read event rsp() incorrectly performs an explicit decrement of the user->refcount during a rollback process after calling ipmi free recv msg(). Because ipmi free recv msg() already handles the reference drop, this redundant operation causes a reference count underflow. This can lead to a use-after-free scenario where a freed user remains linked in intf->users, potentially causing the system to dereference freed memory or trigger a kernel warning during subsequent event deliveries when ipmi alloc recv msg() attempts to acquire a reference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.