The flaw occurs when the IPMI subsystem attempts to register a sensor interface during kernel boot. It creates several sysfs files—nr_users and nr_msgs—before adding a maintenance_mode file. If the addition of maintenance_mode fails, the error path does not remove all previously created entries, leaving the nr_msgs file active even though the interface is no longer usable. This orphaned sysfs attribute can be read by userspace programs, potentially exposing internal state or kernel data that should not be available. The weakness lies in improper error handling and cleanup in a kernel driver.

All Linux kernel releases are affected until the patch is applied. The fix impacts the generic Linux kernel and is relevant to any distribution that ships the unchanged kernel code. No specific distribution or version is listed, so all deployments using the default Linux kernel should treat this as a bug.

The CVSS score of 4.7 places the issue in the medium range, and no exploit has been reported in the CISA KEV catalog. The EPSS score is unavailable, suggesting limited public exploitation activity. The vulnerability is local to the kernel and would require a local attacker or a user with sufficient privileges to interact with the IPMI sysfs entries. Because the exposed data is not critical and the path to exploitation is nontrivial, the overall risk is moderate. However, the presence of dangling sysfs attributes could be leveraged in a very specific forensic or reconnaissance context.