A memory management vulnerability in the Linux kernel IPMI driver could allow a local authenticated attacker to trigger system instability or privilege escalation.

The vulnerability exists in the ipmi_add_smi function, which fails to correctly clean up sysfs attributes during an error path. An attacker with local, low-privileged access can exploit this improper cleanup to maintain references to freed memory, potentially leading to high-impact consequences.

Successful exploitation of this kernel-level flaw could lead to a complete system compromise or denial of service. While the CVSS score of 7.8 reflects a high severity, the requirement for local access necessitates that an attacker already have a foothold on the target machine. Unauthorized access to kernel memory can result in the loss of data integrity, confidentiality, and availability for all services running on the affected host.

Immediate Action: Apply the latest security updates provided by your Linux distribution, specifically ensuring the kernel is upgraded to version 6.18.50, 7.2.4, or later.

Proactive Monitoring: Monitor system logs for kernel oops, panic events, or unusual behavior related to the IPMI subsystem that might indicate an exploitation attempt.

Compensating Controls: Restrict local shell access to only authorized users and implement kernel hardening measures, such as disabling unnecessary kernel modules and enforcing strict access controls.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to the stability and security of Linux-based systems. Administrators should prioritize patching the kernel across all enterprise environments. Because this flaw resides in core kernel code, testing updates in a staging environment prior to full deployment is recommended to ensure compatibility with existing hardware and drivers.