CVE-2026-43221
MediumSummary
A vulnerability in the Linux kernel related to event handler initialization in IPMB has been resolved, which does not use I2C reads but requires a value to be set. Otherwise, an I2C read will return an uninitialized value from the bus driver.
Risk Assessment
The lack of value initialization may lead to unpredictable system behavior, posing a risk to the stability and security of applications using IPMB.
Recommendation
It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability and ensure proper event handling.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: initialise event handler read bytes IPMB doesn't use i2c reads, but the handler needs to set a value. Otherwise an i2c read will return an uninitialised value from the bus driver.