Description
In the Linux kernel, the following vulnerability has been resolved:

ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()

It's pointless to call WARN_ON() in case of an allocation failure in
dev_change_net_namespace() and device_rename(), since it only leads to
useless splats caused by deliberate fault injections, so avoid it.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Published: 2026-08-28
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: No direct security impact
Action: Assess impact
AI Analysis

Impact

The patch removes a redundant WARN_ON call that was executed when a network‑namespace switch failed due to a memory allocation error in the IEEE 802.15.4 networking driver. The warning was harmless; its removal simply eliminates unnecessary log output. The change does not expose any confidentiality, integrity, or availability weakness and there is no known method to exploit it.

Affected Systems

Linux kernel implementations that include the cfg802154 driver are affected, specifically any kernel build before the patch was applied. All distributions shipping a kernel with this driver may experience the redundant warning until the update is incorporated.

Risk and Exploitability

The CVSS score for this vulnerability is 5.5, and its EPSS score is less than 1%, indicating a low probability of exploitation. It is not listed in the CISA Known Exploited Vulnerabilities catalog, and the change only removes a redundant WARN_ON call that would otherwise produce unnecessary log output; therefore the likelihood of malicious exploitation is negligible.

Generated by OpenCVE AI on September 2, 2026 at 05:42 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the patch that removes the redundant WARN_ON call.
  • If an upgrade cannot be performed immediately, monitor system logs for WARN_ON messages related to cfg802154 and treat them as benign, ensuring that no false alarm triggers remediation actions.
  • Coordinate with distribution maintainers to ensure the patch is applied promptly.

Generated by OpenCVE AI on September 2, 2026 at 05:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 02 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-779
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Fri, 28 Aug 2026 12:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() It's pointless to call WARN_ON() in case of an allocation failure in dev_change_net_namespace() and device_rename(), since it only leads to useless splats caused by deliberate fault injections, so avoid it. Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Title ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:48:36.911Z

Reserved: 2026-08-26T14:34:25.774Z

Link: CVE-2026-80616

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:45.620

Modified: 2026-08-28T08:16:45.620

Link: CVE-2026-80616

cve-icon Redhat

Severity : Low

Publid Date: 2026-08-28T00:00:00Z

Links: CVE-2026-80616 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-02T05:45:04Z

Weaknesses