A memory safety vulnerability exists in the Linux kernel IPMI IPMB driver that could allow a local authenticated attacker to read uninitialized stack memory or trigger a denial of service.

The ipmb_write function fails to validate the message length before processing fields, allowing zero or short writes to read uninitialized stack memory or cause a buffer underflow. This vulnerability requires local access with low privileges (PR:L) to trigger.

The vulnerability carries a CVSS score of 7.1, reflecting a high severity due to the potential for sensitive information disclosure and system instability. While exploitation requires local access, a successful attack could compromise the integrity of kernel-level processes or lead to service disruption, which is particularly concerning for systems utilizing IPMI for hardware management.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for unusual kernel crashes or attempts to interact with the IPMI subsystem by unauthorized users.

Compensating Controls: Restrict access to the IPMI device interface to only necessary system accounts to prevent local attackers from reaching the vulnerable function.

Public Exploit Available: Unknown

The severity of this kernel-level flaw necessitates immediate prioritization of kernel updates. Administrators should identify all systems running affected Linux kernel versions and schedule maintenance windows to apply the upstream patches, as there are no effective workarounds to fully remediate the underlying logic error.