Impact
In the Linux kernel, the code that unregisters a ftrace function can trigger a WARN_ON if the ftrace_ops was never enabled or has already been torn down. This warning is produced during perf_event allocation error cleanup when the ftrace_ops registration failed, leading the kernel to log a warning. The vulnerability is a logic flaw that causes unexpected warning logs during normal error handling and does not explicitly result in a crash or denial of service. The flaw manifests when perf_event_alloc() encounters an error and its cleanup path walks through perf_trace_event_close() and ultimately __unregister_ftrace_function().
Affected Systems
The issue exists in all Linux kernel releases before the fix was committed to the repository. Any vendor that ships a kernel based on those releases inherits the flaw. No specific version list is provided, so the vulnerability applies broadly to unpatched kernels.
Risk and Exploitability
The CVE is not listed in the KEV catalog and its EPSS score is unavailable. Exploitation would require triggering a perf_event allocation error, which typically requires privileged or kernel-level access. The resulting WARN_ON may surface only in kernel logs and does not provide a clear path to code execution or a service denial. Consequently the overall risk is moderate, higher for privileged users on unpatched systems.
OpenCVE Enrichment