CVE-2023-54064

What it actually does

A memory leak occurs in the IPMI SSIF driver when ssif_info_find() is called multiple times during adapter scanning; the function unconditionally sets adapter_name from SMBIOS data without checking if it was already allocated, causing repeated allocations without corresponding frees.

Why it matters to the business

Long-running systems using IPMI SSIF may experience gradual kernel memory exhaustion, leading to degraded performance, increased swap usage, or eventual system instability during repeated adapter scans.

How an attack unfolds

An attacker with the ability to trigger repeated IPMI adapter scans (typically requiring local access or specific hardware configuration) could cause the leak to accumulate, but the low EPSS and lack of known exploitation indicate this is primarily a stability issue rather than a remote code execution vector.

How to fix it

Upgrade affected Linux kernels to the fixed versions: Debian 11 systems to 5.10.158-1 or later, and Debian 12/13 systems to 6.0.3-1 or later. Reboot after installing the updated kernel packages.

How to confirm the fix worked

Verify the running kernel version matches or exceeds the fixed releases listed for each Debian release; optionally inspect the ssif_info_find() function in the kernel source to confirm the NULL check before setting adapter_name is present.

Typical attack path

1. Obtain local access or trigger conditions that invoke IPMI SSIF adapter scanning
2. Cause ssif_info_find() to be called repeatedly without freeing prior allocations
3. Observe gradual kernel memory consumption over time

How to detect it

Review kernel logs and memory statistics for signs of unusual allocation growth in the IPMI subsystem; examine dmesg or /proc/meminfo for patterns consistent with repeated adapter scans, though no public exploitation artifacts are known.

What your security team should do

• Prioritize kernel package updates on all Debian systems using IPMI SSIF
• Schedule reboots to activate the fixed kernels
• Monitor kernel memory usage metrics for unexpected growth in IPMI-enabled environments