In the Linux kernel, a logic flaw allows the helper function sk_mc_loop() to generate a WARN_ON_ONCE message when invoked with sockets that are not INET or INET6 families, such as AF_PACKET sockets used for raw or packet operations over virtual interfaces. The function executes normally for supported families but falls through the switch for others, blindly triggering a warning. Although this defect does not directly compromise confidentiality or integrity, the excessive warnings could clutter system logs, consume resources, or obscure genuine errors, potentially impacting availability. The flaw resides in improper handling of unsupported socket families and could be exploited further if an attacker can manipulate socket creation or monitor kernel logs for overflow.

All Linux kernel releases that have not yet applied the commit that removes the WARN_ON_ONCE from sk_mc_loop(), irrespective of vendor distribution. The exact affected version range is not listed, so any kernel prior to the patch is considered vulnerable.

The CVE carries no EPSS data or CISA KEV listing, indicating a low current exploitation probability. The bug is local‑system and requires kernel access; it does not provide a remote code execution path, but it can be leveraged by privileged users to cause denial of service through log noise. The likely attack vector is a privileged user or root process creating non‑INET sockets that trigger the warning repeatedly. Given the lack of public exploitation, the risk remains moderate but should be mitigated promptly.