{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43221", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:55.994Z", "datePublished": "2026-05-06T11:28:21.579Z", "dateUpdated": "2026-05-06T11:28:21.579Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-06T11:28:21.579Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: ipmb: initialise event handler read bytes\n\nIPMB doesn't use i2c reads, but the handler needs to set a value.\nOtherwise an i2c read will return an uninitialised value from the bus\ndriver."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/char/ipmi/ipmi_ipmb.c"], "versions": [{"version": "63c4eb347164845b380089012fe43992511c0ad3", "lessThan": "905554ebd76aeee370bfd5136ea11e0b9d75c6f1", "status": "affected", "versionType": "git"}, {"version": "63c4eb347164845b380089012fe43992511c0ad3", "lessThan": "56d5c0557e53c4d8d92a619fa83eaae178165e07", "status": "affected", "versionType": "git"}, {"version": "63c4eb347164845b380089012fe43992511c0ad3", "lessThan": "2dfbc8c17dd161885336e77e71c336cd62cf6748", "status": "affected", "versionType": "git"}, {"version": "63c4eb347164845b380089012fe43992511c0ad3", "lessThan": "f726b3a57e00bb6249c67714c11ae8b4b31719a1", "status": "affected", "versionType": "git"}, {"version": "63c4eb347164845b380089012fe43992511c0ad3", "lessThan": "102712417bb6aa9a00d852bc59cb0a276db486c4", "status": "affected", "versionType": "git"}, {"version": "63c4eb347164845b380089012fe43992511c0ad3", "lessThan": "9f235ccecd03c436cb1683eac16b12f119e54aa9", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/char/ipmi/ipmi_ipmb.c"], "versions": [{"version": "5.16", "status": "affected"}, {"version": "0", "lessThan": "5.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.165", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.128", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.16", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.6", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.1.165"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.6.128"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.18.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.19.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/905554ebd76aeee370bfd5136ea11e0b9d75c6f1"}, {"url": "https://git.kernel.org/stable/c/56d5c0557e53c4d8d92a619fa83eaae178165e07"}, {"url": "https://git.kernel.org/stable/c/2dfbc8c17dd161885336e77e71c336cd62cf6748"}, {"url": "https://git.kernel.org/stable/c/f726b3a57e00bb6249c67714c11ae8b4b31719a1"}, {"url": "https://git.kernel.org/stable/c/102712417bb6aa9a00d852bc59cb0a276db486c4"}, {"url": "https://git.kernel.org/stable/c/9f235ccecd03c436cb1683eac16b12f119e54aa9"}], "title": "ipmi: ipmb: initialise event handler read bytes", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: ipmb: initialise event handler read bytes\n\nIPMB doesn't use i2c reads, but the handler needs to set a value.\nOtherwise an i2c read will return an uninitialised value from the bus\ndriver."}], "id": "CVE-2026-43221", "lastModified": "2026-05-06T13:07:51.607", "metrics": {}, "published": "2026-05-06T12:16:41.780", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/102712417bb6aa9a00d852bc59cb0a276db486c4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2dfbc8c17dd161885336e77e71c336cd62cf6748"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/56d5c0557e53c4d8d92a619fa83eaae178165e07"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/905554ebd76aeee370bfd5136ea11e0b9d75c6f1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9f235ccecd03c436cb1683eac16b12f119e54aa9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f726b3a57e00bb6249c67714c11ae8b4b31719a1"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}

{"bugzilla": {"description": "kernel: ipmi: ipmb: initialise event handler read bytes", "id": "2467179", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467179"}, "csaw": false, "cwe": "CWE-909", "details": ["A flaw was found in the Linux kernel's Intelligent Platform Management Bus (IPMB) component. The IPMB event handler fails to initialize read bytes, which can lead to an uninitialized value being returned during an I2C (Inter-Integrated Circuit) read operation. This could allow a local attacker to obtain sensitive information from the system."], "name": "CVE-2026-43221", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43221\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43221\nhttps://lore.kernel.org/linux-cve-announce/2026050653-CVE-2026-43221-a254@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c4eb347164845b380089012fe43992511c0ad3,905554ebd76aeee370bfd5136ea11e0b9d75c6f1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c4eb347164845b380089012fe43992511c0ad3,56d5c0557e53c4d8d92a619fa83eaae178165e07)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c4eb347164845b380089012fe43992511c0ad3,2dfbc8c17dd161885336e77e71c336cd62cf6748)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c4eb347164845b380089012fe43992511c0ad3,f726b3a57e00bb6249c67714c11ae8b4b31719a1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c4eb347164845b380089012fe43992511c0ad3,102712417bb6aa9a00d852bc59cb0a276db486c4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c4eb347164845b380089012fe43992511c0ad3,9f235ccecd03c436cb1683eac16b12f119e54aa9)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.16"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.165,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.128,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.75,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.16,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.6,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-06T16:45:07.231898+00:00", "updated": "2026-05-07T06:15:23.460044+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}