A vulnerability in the Linux kernel's IPMI driver was addressed where the driver did not properly return to a normal state if message allocation… (CVE-2026-46108)
A vulnerability in the Linux kernel's IPMI driver was addressed where the driver did not properly return to a normal state if message allocation failed. This could cause the driver to remain in a non-functional state. The issue affects version 3.0 of the affected product. The vulnerability has a medium severity rating and impacts availability but not confidentiality or integrity.
AI Analysis
Technical Summary
The Linux kernel IPMI driver contained a flaw where, upon failure to allocate a message, the driver would not resume normal operation, potentially causing a denial of service condition. This was resolved by ensuring the driver returns to a normal state after such failures. The vulnerability is identified as CVE-2026-46108 and affects version 3.0 of the product. No known exploits are reported in the wild.
Potential Impact
The vulnerability impacts system availability by potentially causing the IPMI driver to stop functioning correctly when message allocation fails. There is no impact on confidentiality or integrity. This could lead to denial of service conditions on affected systems.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch link is provided in the available data. Monitor the Microsoft Security Response Center advisory for updates and apply any official patches once available.
A vulnerability in the Linux kernel's IPMI driver was addressed where the driver did not properly return to a normal state if message allocation… (CVE-2026-46108)
Description
A vulnerability in the Linux kernel's IPMI driver was addressed where the driver did not properly return to a normal state if message allocation failed. This could cause the driver to remain in a non-functional state. The issue affects version 3.0 of the affected product. The vulnerability has a medium severity rating and impacts availability but not confidentiality or integrity.
CVSS v3.1
Score 5.5medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel IPMI driver contained a flaw where, upon failure to allocate a message, the driver would not resume normal operation, potentially causing a denial of service condition. This was resolved by ensuring the driver returns to a normal state after such failures. The vulnerability is identified as CVE-2026-46108 and affects version 3.0 of the product. No known exploits are reported in the wild.
Potential Impact
The vulnerability impacts system availability by potentially causing the IPMI driver to stop functioning correctly when message allocation fails. There is no impact on confidentiality or integrity. This could lead to denial of service conditions on affected systems.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch link is provided in the available data. Monitor the Microsoft Security Response Center advisory for updates and apply any official patches once available.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_vex
- Csaf Version
- 2.0
- Publisher
- Microsoft Security Response Center
- Advisory Id
- msrc_CVE-2026-46108
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- 3.1
Threat ID: 6a19fecee29bf47b500fe35c
Added to database: 05/29/2026, 21:02:06 UTC
Last enriched: 06/26/2026, 23:37:56 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 49
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.