Impact
The vulnerability is a resource leak that occurs when the Dell WMI base module in the Linux kernel fails to load. Because cleanup of SMBIOS requests and the privacy driver is not performed on load failure, memory and other resources can accumulate over time. Accumulation may cause the kernel to exhaust available memory or other critical resources, potentially degrading performance or causing a system to become unstable or restart, which constitutes a denial‑of‑service scenario.
Affected Systems
All Linux kernel installations that include the Dell‑WMI‑Base module are potentially affected. The vulnerability can affect any distribution that ships the module without disabling it, and version information was not supplied, meaning any kernel containing the module is potentially vulnerable until the corresponding fix is applied.
Risk and Exploitability
The EPSS score is below 1 %, indicating a very low probability of exploitation in the wild. The CVSS score is 5.5, indicating medium severity. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require an attacker to trigger a module load failure, which is likely a local privilege scenario involving the ability to load kernel modules. While no remote attack vector is documented, the risk remains moderate due to the potential for denial of service if the leak is significant.
OpenCVE Enrichment
Debian DLA
Debian DSA