Impact
In the Linux kernel, a flaw in the ethosu driver caused the ethosu_job_open() function to return a 0 or 1 value from a WARN_ON() check instead of the original negative error code. This means the kernel would report a successful opening of a file descriptor even when initialization of the DRM scheduling entity failed, potentially allowing code to proceed under false assumptions about the driver state.
Affected Systems
All Linux kernel installations that include the ethosu driver are potentially affected, as the issue exists in the kernel source prior to the commit that fixed this function. No specific version range was supplied, so any kernel that contains the unintended WARN_ON() behavior is in scope.
Risk and Exploitability
Based on the description, it is inferred that an attacker would need to rely on the incorrect success status to manipulate kernel behavior. The CVSS score of 5.5 indicates a moderate severity. The EPSS score of < 1% and absence from KEV suggest low exploitation probability. The flaw merely corrupts error reporting, so it is unlikely to be directly exploitable.
OpenCVE Enrichment