Impact
The Linux kernel contains an obsolete interface for setting a version‑1 soft memory limit. The vulnerability involves that interface still parsing and responding to write attempts, which can trigger warnings and affect memory reclamation logic. Because the knob is static and has no effect on newer kernels, the change removes the possibility of misconfigured memory limits causing erratic kernel behavior.
Affected Systems
All Linux kernel releases that expose the memory.soft_limit_in_bytes sysfs attribute, which was deprecated in version 6.12. This includes older kernels prior to 6.12. No specific version list is provided, but any kernel that still supports the deprecated soft limit knob is affected.
Risk and Exploitability
No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, indicating that no widespread exploitation activity has been observed. The attack vector is likely local, requiring a user with permission to write to the sysfs file. Given the lack of remote access or privilege escalation capabilities, the risk of exploitation is low to moderate and the impact would primarily be system instability rather than critical compromise.
OpenCVE Enrichment
Debian DLA
Debian DSA