The vulnerability occurs in the Linux kernel's IPMI message handler. During the startup of an IPMI interface, if an error is encountered, scheduled work may not be cancelled properly. This oversight can lead to dangling references or usage of freed resources, potentially triggering a kernel panic or memory corruption, thus denying service. The flaw is identified as a use‑after‑free bug under CWE‑772.

All Linux kernel builds that include the IPMI subsystem are affected, including the mainstream kernel releases compiled for general‑purpose and embedded distributions. The impact is specific to kernel versions that have not yet incorporated the commit that fixes the faulty cancellation logic. No specific vendor version is listed, so the entire Linux kernel is considered at risk until the patch is applied.

The CVSS base score of 4.4 indicates a low severity assessment, and the EPSS score is not available, suggesting no known active exploitation. The vulnerability is not present in the CISA KEV catalog. Inference indicates that the attack vector would be local, requiring ability to load or modify kernel modules during system boot or runtime; remote exploitation is not described in the advisory. Given the kernel‑level nature, an attacker with privileged access could exploit the flaw to crash the host, though no evidence of remote code execution exists.