A flaw in the Linux kernel’s IPMI silicon interface driver causes the module to stall if it fails to allocate memory for a message, leaving the driver unable to process further IPMI commands. The failure to recover and release allocated resources results in a denial of service within the IPMI subsystem, and can degrade overall system stability. This weakness is classified as CWE‑372 (Imprecise or Incorrect Error Handling).

All Linux distributions that ship the default ipmi_si kernel module are impacted. The issue is confined to the kernel-level IPMI silicon interface code and does not depend on third‑party hardware vendors or user space applications.

The public CVSS score is not available. EPSS indicates a very low exploitation probability (< 1%) and the vulnerability is not listed in CISA KEV. Based on the description, it is inferred that exploitation would require a local privileged user or an attacker able to induce a kernel‑space memory allocation failure, making remote exploitation unlikely without prior escalation. The risk is therefore considered moderate; systems should address the defect promptly.