The freeipmi packages, which provide IPMI remote console and system management software, contain a denial of service vulnerability (CVE-2026-50031) caused by a buffer overflow in the ipmi-oem client. This vulnerability can be triggered remotely to cause a denial of service. Red Hat has released an updated freeipmi package (1.6.18-1.el9_8) for Red Hat Enterprise Linux 9 and related variants to address this issue. The advisory rates the impact as moderate and provides detailed package updates for multiple architectures. No CVSS score is provided in the advisory, but the vendor classifies the severity as moderate.

Successful exploitation of this vulnerability results in denial of service via a buffer overflow in the ipmi-oem client component of freeipmi. This could disrupt system management operations relying on IPMI. There is no indication of code execution or privilege escalation from the provided data. No known exploits in the wild have been reported.

A security update is available from Red Hat that fixes this vulnerability. Users should apply the freeipmi package update version 1.6.18-1.el9_8 or later for Red Hat Enterprise Linux 9 and related distributions. Refer to the Red Hat advisory RHSA-2026:36210 and the update instructions at https://access.redhat.com/articles/11258 for detailed remediation steps.