CVE-2026-81005

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ipmi: si: Fix NULL pointer dereference after failed registration

try_smi_init() allocates new_smi->si_sm and later calls

ipmi_register_smi_mod(), which maps to ipmi_add_smi().

During ipmi_add_smi(), the upper IPMI message handler obtains the

initial BMC device information through __bmc_get_device_id(). This can

fail if the BMC does not return a successful response to the Get Device

ID command.

When the BMC returns a nonzero completion code, the device-id helper

retries the command and eventually returns -EIO if the device ID still

cannot be fetched.

On this failure path, ipmi_add_smi() logs "Unable to get the device id"

and goes to out_err_started, where it invokes the lower driver's

shutdown callback. try_smi_init() then logs the returned registration

failure:

ipmi_si IPI0001:00: IPMI message handler: Unable to get the device id: -5

ipmi_si IPI0001:00: Unable to register device: error -5

For ipmi_si, the shut

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References