Every CVE Search/ Get API key

CVE-2026-85509

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru...

9.8 CriticalFix available

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.49%Up 0.1 points since Sep 4, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

Record
CVE-2026-85509
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-121
Updated
2026-11-02
EUVDEUVD-2026-70887 9.8

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

Record
EUVD-2026-70887
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3j6m-x72j-q52g 9.8

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru...

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

Record
GHSA-3j6m-x72j-q52g
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-121
Updated
2026-11-02
NVD 9.8

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

Record
CVE-2026-85509
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-121
Updated
2026-11-02
OSVBELL-CVE-2026-85509 9.8
Record
BELL-CVE-2026-85509
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-85509 9.8

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

Record
DEBIAN-CVE-2026-85509
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVOESA-2026-3900 9.8

freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification.

Security Fix(es):

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.(CVE-2026-85504)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).(CVE-2026-85505)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).(CVE-2026-85506)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).(CVE-2026-85507)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).(CVE-2026-85508)

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested, potentially leading to denial of service or arbitrary code execution.(CVE-2026-85509)

Record
OESA-2026-3900
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3901 9.8

freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification.

Security Fix(es):

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.(CVE-2026-85504)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).(CVE-2026-85505)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).(CVE-2026-85506)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).(CVE-2026-85507)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).(CVE-2026-85508)

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested, potentially leading to denial of service or arbitrary code execution.(CVE-2026-85509)

Record
OESA-2026-3901
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4065 9.8

freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification.

Security Fix(es):

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.(CVE-2026-85504)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).(CVE-2026-85505)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).(CVE-2026-85506)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).(CVE-2026-85507)

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).(CVE-2026-85508)

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested, potentially leading to denial of service or arbitrary code execution.(CVE-2026-85509)

Record
OESA-2026-4065
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:89753 7.5

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

  • FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)

  • FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)

  • freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)

Bug Fix(es) and Enhancement(s):

  • Update freeipmi to 1.6.20 to fix two potential buffer overflows [rhel-9.8.z] (JIRA:Rocky Linux-279523)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:89753
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:89754 7.5

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

  • FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)

  • FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)

  • freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)

Bug Fix(es) and Enhancement(s):

  • Update freeipmi to 1.6.20 to fix two potential buffer overflows [rhel-8.10.z] (JIRA:Rocky Linux-279519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:89754
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:89905 7.5

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

  • FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)

  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)

  • FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)

  • freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)

Bug Fix(es) and Enhancement(s):

  • Update freeipmi to 1.6.20 to fix two potential buffer overflows [rhel-10.2.z] (JIRA:Rocky Linux-279524)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:89905
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-85509 9.8

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

Record
UBUNTU-CVE-2026-85509
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:89753 No score

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

  • FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)
  • FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)
  • freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)

Bug Fix(es) and Enhancement(s):

  • Update freeipmi to 1.6.20 to fix two potential buffer overflows [almalinux-9.8.z] (JIRA:AlmaLinux-279523)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:89753
Updated
2026-11-02
OSVALSA-2026:89754 No score

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

  • FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)
  • FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)
  • freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)

Bug Fix(es) and Enhancement(s):

  • Update freeipmi to 1.6.20 to fix two potential buffer overflows [almalinux-8.10.z] (JIRA:AlmaLinux-279519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:89754
Updated
2026-11-02
OSVALSA-2026:89905 No score

Moderate: freeipmi security, bug fix, and enhancement update

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

  • FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)
  • FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)
  • FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)
  • freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)

Bug Fix(es) and Enhancement(s):

  • Update freeipmi to 1.6.20 to fix two potential buffer overflows [almalinux-10.2.z] (JIRA:AlmaLinux-279524)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:89905
Updated
2026-11-02
OSVAZL-99110 No score

CVE-2026-85509 affecting package freeipmi for versions less than 1.6.19-1

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.

Record
AZL-99110
Updated
2026-11-02
OSVopenSUSE-SU-2026:11797-1 No score

freeipmi-1.6.19-1.1 on GA media

These are all security issues fixed in the freeipmi-1.6.19-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11797-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21883-1 No score

Security update for freeipmi

This update for freeipmi fixes the following issues:

  • CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719).
  • CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem (bsc#1278722).
  • CVE-2026-85506: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (bsc#1278721).
  • CVE-2026-85507: stack-based buffer overflow in _output_dell_system_info_cmc_info (bsc#1278724).
  • CVE-2026-85508: stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info (bsc#1278726).
  • CVE-2026-85509: stack-based buffer overflow when a BMC returns more bytes than requested (bsc#1278727).
Record
openSUSE-SU-2026:21883-1
Updated
2026-11-02
OSVSUSE-SU-2026:23746-1 No score

Security update for freeipmi

This update for freeipmi fixes the following issues:

  • CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719).
  • CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem (bsc#1278722).
  • CVE-2026-85506: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (bsc#1278721).
  • CVE-2026-85507: stack-based buffer overflow in _output_dell_system_info_cmc_info (bsc#1278724).
  • CVE-2026-85508: stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info (bsc#1278726).
  • CVE-2026-85509: stack-based buffer overflow when a BMC returns more bytes than requested (bsc#1278727).
Record
SUSE-SU-2026:23746-1
Updated
2026-11-02
OSVSUSE-SU-2026:4277-1 No score

Security update for freeipmi

This update for freeipmi fixes the following issues:

  • CVE-2026-50031: Denial of service via buffer overflow in ipmi-oem client (bsc#1267605).
  • CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719).
  • CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem (bsc#1278722).
  • CVE-2026-85506: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (bsc#1278721).
  • CVE-2026-85507: stack-based buffer overflow in _output_dell_system_info_cmc_info (bsc#1278724).
  • CVE-2026-85508: stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info (bsc#1278726).
  • CVE-2026-85509: stack-based buffer overflow when a BMC returns more bytes than requested (bsc#1278727).
Record
SUSE-SU-2026:4277-1
Updated
2026-11-02
OSVUSN-8843-1 No score

freeipmi vulnerabilities

It was discovered that FreeIPMI incorrectly handled certain malformed Fujitsu SEL long-text responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-85504)

It was discovered that FreeIPMI incorrectly handled short responses when retrieving Fujitsu SEL entries, leading to a stack-based buffer over-read. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service. (CVE-2026-85505)

It was discovered that FreeIPMI incorrectly handled certain Dell iDRAC and CMC IPv6 system information responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-85506, CVE-2026-85508)

It was discovered that FreeIPMI incorrectly handled certain Dell CMC system information responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-85507)

It was discovered that FreeIPMI incorrectly handled FRU data responses that were larger than requested, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-85509)

Record
USN-8843-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freeipmi
AlmaLinux:9
From an advisory covering 6 CVEs
 before 1.6.20-1.el9_8
1.6.20-1.el9_8
freeipmi-bmc-watchdog
AlmaLinux:9
From an advisory covering 6 CVEs
 before 1.6.20-1.el9_8
1.6.20-1.el9_8
freeipmi-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 1.6.20-1.el9_8
1.6.20-1.el9_8
freeipmi-ipmidetectd
AlmaLinux:9
From an advisory covering 6 CVEs
 before 1.6.20-1.el9_8
1.6.20-1.el9_8
freeipmi-ipmiseld
AlmaLinux:9
From an advisory covering 6 CVEs
 before 1.6.20-1.el9_8
1.6.20-1.el9_8
freeipmi
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.6.20-1.el8_10
1.6.20-1.el8_10
freeipmi-bmc-watchdog
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.6.20-1.el8_10
1.6.20-1.el8_10
freeipmi-devel
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.6.20-1.el8_10
1.6.20-1.el8_10
freeipmi-ipmidetectd
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.6.20-1.el8_10
1.6.20-1.el8_10
freeipmi-ipmiseld
AlmaLinux:8
From an advisory covering 6 CVEs
 before 1.6.20-1.el8_10
1.6.20-1.el8_10
Show 46 moreShow less
Affected packages
PackageAffectedFixed
freeipmi
AlmaLinux:10
From an advisory covering 6 CVEs
 before 1.6.20-1.el10_2
1.6.20-1.el10_2
freeipmi-bmc-watchdog
AlmaLinux:10
From an advisory covering 6 CVEs
 before 1.6.20-1.el10_2
1.6.20-1.el10_2
freeipmi-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 1.6.20-1.el10_2
1.6.20-1.el10_2
freeipmi-ipmidetectd
AlmaLinux:10
From an advisory covering 6 CVEs
 before 1.6.20-1.el10_2
1.6.20-1.el10_2
freeipmi-ipmiseld
AlmaLinux:10
From an advisory covering 6 CVEs
 before 1.6.20-1.el10_2
1.6.20-1.el10_2
freeipmi
Azure Linux:3
 before 1.6.19-1
1.6.19-1
freeipmi
Alpaquita:23
 1.6.10-r0 up to 1.6.19-r0
1.6.19-r0
freeipmi
Alpaquita:25
 1.6.15-r0 up to 1.6.19-r0
1.6.19-r0
freeipmi
Alpaquita:stream
 1.6.10-r0 up to 1.6.19-r0
1.6.19-r0
freeipmi
Debian:12
 All versions, plus listed versions
1.6.10-11.6.10-21.6.11-11.6.11-21.6.13-1
Show 9 moreShow less
1.6.13-21.6.13-2~bpo12+11.6.13-31.6.15-11.6.15-21.6.16-11.6.17-11.6.18-11.6.19-1
 None known
freeipmi
Debian:13
 All versions, plus listed versions
1.6.15-11.6.15-21.6.16-11.6.17-11.6.18-11.6.19-1
 None known
freeipmi
Debian:14
 before 1.6.19-1, plus listed versions
1.6.15-11.6.15-21.6.16-11.6.17-11.6.18-1
1.6.19-1
freeipmi
openEuler:24.03-LTS-SP1
From an advisory covering 6 CVEs
 before 1.6.19-1.oe2403sp1
1.6.19-1.oe2403sp1
freeipmi
openEuler:24.03-LTS-SP3
From an advisory covering 6 CVEs
 before 1.6.19-1.oe2403sp3
1.6.19-1.oe2403sp3
freeipmi
openEuler:24.03-LTS-SP4
From an advisory covering 6 CVEs
 before 1.6.19-1.oe2403sp4
1.6.19-1.oe2403sp4
freeipmi
Rocky Linux:9
From an advisory covering 6 CVEs
 before 0:1.6.20-1.el9_8
0:1.6.20-1.el9_8
freeipmi
Rocky Linux:8
From an advisory covering 6 CVEs
 before 0:1.6.20-1.el8_10
0:1.6.20-1.el8_10
freeipmi
Rocky Linux:10
From an advisory covering 6 CVEs
 before 0:1.6.20-1.el10_2
0:1.6.20-1.el10_2
freeipmi
SUSE:Linux Micro 6.1
From an advisory covering 6 CVEs
 before 1.6.14-slfo.1.1_4.1
1.6.14-slfo.1.1_4.1
freeipmi
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 7 CVEs
 before 1.6.8-150400.3.6.1
1.6.8-150400.3.6.1
freeipmi
Ubuntu:Pro:14.04:LTS
 before 1.1.5-3ubuntu3.3+esm2, plus listed versions
1.1.5-3ubuntu21.1.5-3ubuntu31.1.5-3ubuntu3.11.1.5-3ubuntu3.21.1.5-3ubuntu3.31.1.5-3ubuntu3.3+esm1
1.1.5-3ubuntu3.3+esm2
freeipmi
Ubuntu:Pro:16.04:LTS
 before 1.4.11-1.1ubuntu4.1~0.16.04.1~esm2, plus listed versions
1.1.5-3ubuntu71.4.11-1ubuntu11.4.11-1.1ubuntu2~0.16.041.4.11-1.1ubuntu3~0.16.041.4.11-1.1ubuntu4~0.16.041.4.11-1.1ubuntu4.1~0.16.041.4.11-1.1ubuntu4.1~0.16.04.1~esm1
1.4.11-1.1ubuntu4.1~0.16.04.1~esm2
freeipmi
Ubuntu:Pro:18.04:LTS
 before 1.4.11-1.1ubuntu4.1+esm2, plus listed versions
1.4.11-1.1ubuntu41.4.11-1.1ubuntu4.11.4.11-1.1ubuntu4.1+esm1
1.4.11-1.1ubuntu4.1+esm2
freeipmi
Ubuntu:Pro:20.04:LTS
 before 1.6.4-3ubuntu1.1+esm2, plus listed versions
1.6.3-1.1ubuntu21.6.4-3ubuntu11.6.4-3ubuntu1.11.6.4-3ubuntu1.1+esm1
1.6.4-3ubuntu1.1+esm2
freeipmi
Ubuntu:22.04:LTS
 before 1.6.9-2ubuntu0.22.04.4, plus listed versions
1.6.6-41.6.6-51.6.8-11.6.9-11.6.9-21.6.9-2ubuntu0.22.04.11.6.9-2ubuntu0.22.04.21.6.9-2ubuntu0.22.04.3
1.6.9-2ubuntu0.22.04.4
freeipmi
Ubuntu:24.04:LTS
 before 1.6.13-3ubuntu0.2, plus listed versions
1.6.11-11.6.11-21.6.13-21.6.13-31.6.13-3ubuntu0.1
1.6.13-3ubuntu0.2
freeipmi
Ubuntu:26.04:LTS
 before 1.6.16-1ubuntu0.2, plus listed versions
1.6.15-21.6.16-11.6.16-1ubuntu0.1
1.6.16-1ubuntu0.2
freeipmi
Ubuntu:Pro:14.04:LTS
From an advisory covering 6 CVEs
 before 1.1.5-3ubuntu3.3+esm2, plus listed versions
1.1.5-3ubuntu21.1.5-3ubuntu31.1.5-3ubuntu3.11.1.5-3ubuntu3.21.1.5-3ubuntu3.31.1.5-3ubuntu3.3+esm1
1.1.5-3ubuntu3.3+esm2
freeipmi
Ubuntu:Pro:16.04:LTS
From an advisory covering 6 CVEs
 before 1.4.11-1.1ubuntu4.1~0.16.04.1~esm2, plus listed versions
1.1.5-3ubuntu71.4.11-1ubuntu11.4.11-1.1ubuntu2~0.16.041.4.11-1.1ubuntu3~0.16.041.4.11-1.1ubuntu4~0.16.041.4.11-1.1ubuntu4.1~0.16.041.4.11-1.1ubuntu4.1~0.16.04.1~esm1
1.4.11-1.1ubuntu4.1~0.16.04.1~esm2
freeipmi
Ubuntu:Pro:18.04:LTS
From an advisory covering 6 CVEs
 before 1.4.11-1.1ubuntu4.1+esm2, plus listed versions
1.4.11-1.1ubuntu41.4.11-1.1ubuntu4.11.4.11-1.1ubuntu4.1+esm1
1.4.11-1.1ubuntu4.1+esm2
freeipmi
Ubuntu:Pro:20.04:LTS
From an advisory covering 6 CVEs
 before 1.6.4-3ubuntu1.1+esm2, plus listed versions
1.6.3-1.1ubuntu21.6.4-3ubuntu11.6.4-3ubuntu1.11.6.4-3ubuntu1.1+esm1
1.6.4-3ubuntu1.1+esm2
freeipmi
Ubuntu:22.04:LTS
From an advisory covering 6 CVEs
 before 1.6.9-2ubuntu0.22.04.4, plus listed versions
1.6.6-41.6.6-51.6.8-11.6.9-11.6.9-21.6.9-2ubuntu0.22.04.11.6.9-2ubuntu0.22.04.21.6.9-2ubuntu0.22.04.3
1.6.9-2ubuntu0.22.04.4
freeipmi
Ubuntu:24.04:LTS
From an advisory covering 6 CVEs
 before 1.6.13-3ubuntu0.2, plus listed versions
1.6.11-11.6.11-21.6.13-21.6.13-31.6.13-3ubuntu0.1
1.6.13-3ubuntu0.2
freeipmi
Ubuntu:26.04:LTS
From an advisory covering 6 CVEs
 before 1.6.16-1ubuntu0.2, plus listed versions
1.6.15-21.6.16-11.6.16-1ubuntu0.1
1.6.16-1ubuntu0.2
freeipmi
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 1.6.19-1.1
1.6.19-1.1
freeipmi
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 1.6.15-160000.5.1
1.6.15-160000.5.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-85509 is a critical vulnerability (CVSS 9.8) in Freeipmi, published September 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in freeipmi 1.6.19-1.

References

Show 60 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open