A recent change to the Linux kernel introduced a spurious warning in the power management subsystem – specifically when pm_restore_gfp_mask() is called in hibernation paths that may or may not have a restricted GFP mask. The added WARN_ON() triggers a console warning even when the function call is defensive and benign, leading to unnecessary log entries but no direct compromise of confidentiality, integrity or availability. The impact is primarily operational, as it can overwhelm system logs or mislead operators into thinking a real problem exists.

The issue affects all Linux kernel releases that incorporated commit 35e4a69b2003f without the subsequent fix. No specific version range is provided in the CNA data, but the vulnerability is present in the kernel source before the removal of the WARN_ON() wrapper. Systems running older kernels that have not yet applied this patch are susceptible.

With a CVSS score of 5.5 the vulnerability is considered moderate. The EPSS score is below 1 % and the vulnerability is not listed in CISA’s KEV catalog, indicating a low likelihood of exploitation. The issue is local to the kernel and requires privileged execution; an attacker would need to execute or influence kernel code to trigger these warnings, which does not provide any direct foothold or privilege escalation. The primary risk lies in operational noise rather than security compromise.