In the Linux kernel, the IPMB event handler in the IPMI subsystem fails to initialize a required buffer before performing an I2C read. Because IPMB does not normally use I2C reads, the handler’s oversight causes the bus driver to return whatever data is currently present in the uninitialized buffer. This results in a kernel‑space uninitialized read that could expose sensitive kernel memory contents or create unpredictable kernel behavior, corresponding to CWE‑908.

The vulnerability is present in any Linux kernel that contains the IPMI IPMB driver. No specific kernel release ranges are listed, so every build with the vulnerable code path is potentially exposed.

An attacker would need to trigger the IPMB handler, which typically requires local privilege or the ability to load a malicious kernel module. Based on the description, the likely attack vector is local and may involve privilege escalation or kernel module exploitation. The flaw does not provide arbitrary code execution but can leak kernel data and destabilize the system. The EPSS score is < 1% and the CVSS score is 5.5, indicating a moderate severity but a very low probability of exploitation, though the confidentiality impact could be significant if kernel memory is exposed. The vulnerability is not listed in the CISA KEV catalog.