The issue arises in the Linux kernel's IPMI IPMB write function. The code reads message fields before validating the length byte. A zero‑length or short write can cause the function to read uninitialized stack bytes, while a length below the SMBus header trunc leading to a buffer underflow. These flaws allow an attacker to read arbitrary kernel memory before the payload is parsed, enabling information disclosure and potentially local privilege escalation. The vulnerability is a classic example of improper input validation and uninitialized memory usage.

All Linux kernel releases that include the IPMI IPMB stack are potentially affected, as the vendor list indicates Linux. No specific version range is given, so any kernel that has not yet applied the public patch remains vulnerable. Users should upgrade to a kernel version that incorporates the fix introduced in the referenced commit series.

The CVSS and EPSS scores are not listed, and the vulnerability is not included in the CISA KEV catalogue, implying no public exploit has been reported. Despite the lack of a code execution vector, the ability to read kernel memory provides a significant security risk. Exploitation requires access to the IPMI interface, which is often restricted to privileged users or managed through embedded control modules. Consequently, the risk is moderate but potentially serious for systems that expose IPMI to untrusted or partially trusted users.