---
id: CVE-2026-81004
title: 'ipmi:msghandler: Cancel work cleanly on an error'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ipmi:msghandler: Cancel work cleanly on an error

  If an error occurs during startup of an IPMI interface, it may have
  scheduled work to run.  The work needs to be cance…
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-772
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= edb6c2118293c1fba9cd11ca80ed043d2411a7e5 <
    99692252b348c11377fd0cdd66b6b18f3b22758e
  - >-
    Linux >= 62cd145453d577113f993efd025f258dd86aa183 <
    a496c51dd3257ed7e00873af2ad9bb22c3ddc4cf
  - >-
    Linux >= 62cd145453d577113f993efd025f258dd86aa183 <
    ae84a2536577057e97f23f75a202e26d0e86cf01
  - Linux 5199fc5dc9c519115457406009fcefd50721c995
  - Linux >= 6.18.20 < 6.18.50
  - Linux >= 6.19.10 < 6.20
  - Linux 7.0
published: '2026-09-11'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T08:46:28.597Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-81004'
references:
  - url: 'https://git.kernel.org/stable/c/99692252b348c11377fd0cdd66b6b18f3b22758e'
  - url: 'https://git.kernel.org/stable/c/a496c51dd3257ed7e00873af2ad9bb22c3ddc4cf'
  - url: 'https://git.kernel.org/stable/c/ae84a2536577057e97f23f75a202e26d0e86cf01'
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-81004.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-81004'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2532030'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-81004'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-81004'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-81004.mbox
tags:
  - cve.org
  - csaf
  - vex
  - red-hat
  - score-dispute
epss: 0.00178
epssPercentile: 0.07334
scores:
  cna: 8.4
  vendor: 5.5
ingestedAt: '2026-09-14T15:23:07.476Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ipmi:msghandler: Cancel work cleanly on an error

If an error occurs during startup of an IPMI interface, it may have
scheduled work to run.  The work needs to be canceled before the
interface can be freed.

## Affected

- `Linux >= edb6c2118293c1fba9cd11ca80ed043d2411a7e5 < 99692252b348c11377fd0cdd66b6b18f3b22758e`
- `Linux >= 62cd145453d577113f993efd025f258dd86aa183 < a496c51dd3257ed7e00873af2ad9bb22c3ddc4cf`
- `Linux >= 62cd145453d577113f993efd025f258dd86aa183 < ae84a2536577057e97f23f75a202e26d0e86cf01`
- `Linux 5199fc5dc9c519115457406009fcefd50721c995`
- `Linux >= 6.18.20 < 6.18.50`
- `Linux >= 6.19.10 < 6.20`
- `Linux 7.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-09-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-81004.json)