Skip to content
Critical FreeIPMI Vulnerabilities Lead to Denial of Service Risks

Critical FreeIPMI Vulnerabilities Lead to Denial of Service Risks

First seen 29 Sep 2026, 21:04 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 29, 2026 at 21:05 UTC
  • •FreeIPMI vulnerabilities could lead to denial of service or arbitrary code execution.
  • •Patches are available for multiple Ubuntu LTS versions, including 20.04 to 26.04.
  • •CVE-2026-85504 and CVE-2026-85505 are critical vulnerabilities disclosed on September 4, 2026.

Multiple vulnerabilities were discovered in FreeIPMI, affecting systems that utilize the Intelligent Platform Management Interface. Key issues include a stack-based buffer overflow from malformed Fujitsu SEL long-text responses (CVE-2026-85504) and a buffer over-read from short responses (CVE-2026-85505). These vulnerabilities could allow an attacker controlling a malicious IPMI device to crash FreeIPMI, resulting in a denial of service or potentially executing arbitrary code. The vulnerabilities were disclosed on September 4, 2026, and patches are available for various Ubuntu LTS versions. Users are urged to update their systems to mitigate risks. The vulnerabilities primarily affect systems using FreeIPMI tools and libraries.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-04
Multiple FreeIPMI vulnerabilities disclosed
CVE-2026-85504 and CVE-2026-85505 were published, detailing critical buffer overflow and over-read issues.
Linuxsecurity
2026-09-04
CVE-2026-85506 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-04
CVE-2026-85509 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-04
CVE-2026-85507 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-04
CVE-2026-85508 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-04
CVE-2026-85505 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-04
CVE-2026-85504 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-29
Patches released for FreeIPMI vulnerabilities
Ubuntu released updates for FreeIPMI tools and libraries to address the vulnerabilities.
Ubuntu

More articles in this cluster (2)

Following this threat?

Track CVE-2026-85504 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3