CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the IPMI subsystem, specifically the ipmb_write() function, which improperly validates the length of write messages. This oversight can lead to the reading of uninitialized stack memory or cause underflows, potentially exposing sensitive data or leading to unpredictable behavior. Organizations utilizing Linux systems that implement IPMI should prioritize patching this vulnerability to mitigate risks associated with data leakage and system integrity.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validating the length byte. A zero or short write can read uninitialized stack bytes. A length smaller than the SMBus header underflows the block write length. Require a non-empty buffer and the minimum IPMB request length. Also require the length byte plus payload before parsing the message.