PT-2026-85403

CVE-2026-85509

·

Published

2026-09-04

·

Updated

2026-10-26

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19
Description A stack-based buffer overflow occurs in the read fru data() function within the libfreeipmi/fru/ipmi-fru.c file. This issue is triggered when a Baseboard Management Controller (BMC) returns more bytes of data than were originally requested.
Recommendations Update to version 1.6.19 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-121: Stack-based Buffer Overflow
Related identifiers
CVE-2026-85509
ALSA-2026:89753
ALSA-2026:89754
ALSA-2026:89905
AZL-99110
OESA-2026-3900
OESA-2026-3901
OESA-2026-4065
OPENSUSE-SU-2026:11797-1
OPENSUSE-SU-2026:21883-1
SUSE-SU-2026:23746-1
SUSE-SU-2026:4277-1
USN-8843-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com