A flaw in the Linux kernel’s IPMI silicon interface driver causes the module to stall if it fails to allocate memory for a message, leaving the driver unable to process further IPMI commands. The failure to recover and release allocated resources results in a denial of service within the IPMI subsystem, and can degrade overall system stability. This weakness is classified as CWE-372 (Imprecise or Incorrect Error Handling) and NVD-CWE-noinfo.

All Linux distributions that ship the default ipmi_si kernel module are impacted. The issue is confined to the kernel-level IPMI silicon interface code and does not depend on third‑party hardware vendors or user space applications.

The CVSS score of 5.5 indicates moderate severity. EPSS indicates a very low exploitation probability (< 1%) and the vulnerability is not listed in CISA KEV. Based on the description, it is inferred that exploitation would require a local privileged user or an attacker able to induce a kernel‑space memory allocation failure, making remote exploitation unlikely without prior escalation. The risk is therefore considered moderate; systems should address the defect promptly.