Critical Buffer Overflow Vulnerabilities in FreeIPMI Affect Ubuntu Systems

Multiple buffer overflow vulnerabilities were discovered in FreeIPMI by Zhihan Zheng, affecting various Ubuntu versions. These vulnerabilities (CVE-2026-33554, CVE-2026-50031) allow local attackers controlling a malicious IPMI device to crash FreeIPMI, leading to denial of service. Affected versions include freeipmi-tools across Ubuntu LTS releases from 14.04 to 26.04. Users are advised to update their systems to mitigate these vulnerabilities. The vulnerabilities were published on March 24, 2026, and June 3, 2026, respectively. A standard system update is recommended to apply the necessary patches. Ubuntu Pro offers extended support for affected versions.

Key Points: • FreeIPMI vulnerabilities could lead to denial of service if exploited. • Local attackers with malicious IPMI devices can trigger crashes in FreeIPMI. • Users should update to patched versions of freeipmi-tools across supported Ubuntu LTS releases.