CVE-2026-46044ipmi:ssif: Clean up kthread on errors
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped. So make sure the kthread is stopped on an error condition if it is running.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 259307074bfcf1ff88016e12c68f057aee6cb694 builds before 549607af66a0efdb41307ba6343eed31de8b133e; from 259307074bfcf1ff88016e12c68f057aee6cb694 before f2d0a3ede5ebf404d4c334a1f04ef439e0086857; from 259307074bfcf1ff88016e12c68f057aee6cb694 before e662be2d0d05253d0fd7deda9771aa036c23393e; 259307074bfcf1ff88016e12c68f057aee6cb694 builds before 858bc8b9edb6eaf0522900128bb9053e2df6b0f6; 259307074bfcf1ff88016e12c68f057aee6cb694 builds before 800febc637d1c1974b1e899dea8a07e115d60766; 259307074bfcf1ff88016e12c68f057aee6cb694 builds before 75c486cb1bcaa1a3ec3a6438498176a3a4998ae4 | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | all versions | CISA ADP |
linux linux_kernel linux:linux_kernel | from 3.19 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.18.27; from 6.19 before 7.0.4 | NVD |
References
- https://git.kernel.org/stable/c/549607af66a0efdb41307ba6343eed31de8b133epatch
- https://git.kernel.org/stable/c/f2d0a3ede5ebf404d4c334a1f04ef439e0086857patch
- https://git.kernel.org/stable/c/e662be2d0d05253d0fd7deda9771aa036c23393e
- https://git.kernel.org/stable/c/858bc8b9edb6eaf0522900128bb9053e2df6b0f6patch
- https://git.kernel.org/stable/c/800febc637d1c1974b1e899dea8a07e115d60766patch
- https://git.kernel.org/stable/c/75c486cb1bcaa1a3ec3a6438498176a3a4998ae4patch
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.