GHSA-3367-ghgr-fgg3 · Severity: unknown — In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message...
In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty message instead of an error when fetching events. There are apparently some new BMCs that make this error, so we need to compensate.
Conclusion & alert: CVE-2026-46128 is rated Low Risk (5.2/100): low exploitation likelihood (EPSS 0.02%). Mandatory action: Low composite risk—no urgent action required; patch on your normal maintenance cycle and revisit priority if CVSS or EPSS increases.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-05-28 | — | 0.02% | — |
Full EPSS history (1 record total)
CVSS metrics for this CVE.
No CVSS data in dataset for this CVE.
GHSA-3367-ghgr-fgg3 · Severity: unknown — In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message...
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
not yet assigned | CVE-2026-46128 not yet assigned priority: Debian including 1 source packages (linux), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 3, open 2. | https://security-tracker.debian.org/tracker/CVE-2026-46128 |
redhat
|
— | — | https://access.redhat.com/security/cve/CVE-2026-46128 |
suse
|
medium | CVE-2026-46128 severity moderate: SUSE including 20 source package names (cluster-md-kmp-default, dlm-kmp-default, …), 58 product×package rows across 15 product lines (SUSE Linux Enterprise High Availability Extension 15 SP7, SUSE Linux Enterprise Live Patching 15 SP7, … (15 product lines)): Known Not Affected 54, Fixed 4. | https://www.suse.com/security/cve/CVE-2026-46128/ |
ubuntu
|
medium | CVE-2026-46128 medium priority: Ubuntu including 158 source packages (linux, linux-allwinner-5.19, …), 1422 status rows across 9 suites (bionic, focal, jammy, noble, questing, resolute, trusty, upstream, xenial): DNE 1024, ignored 173, needed 141, released 84. | https://ubuntu.com/security/CVE-2026-46128 |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| No affected products in dataset. | |||