Impact
The fix removes the WARN_ON call that was triggered when the kernel thread creation function returned -EINTR due to a SIGKILL. The original code caused unnecessary warning messages in the kernel log whenever a thread startup failed for this reason. The bug does not expose sensitive data, nor does it allow privilege escalation or direct modification of kernel state. The impact is limited to producing spurious warning logs that could clutter diagnostics and potentially mask real issues.
Affected Systems
All Linux kernel distributions that ship a kernel before the patch, which includes many older releases across all major distributions and custom or embedded systems that have not yet applied the upstream change. Users should verify that their kernel is at or beyond the commit that removes the WARN_ON check, otherwise the spurious log entries will continue to occur.
Risk and Exploitability
The CVSS score of 5.5 indicates moderate severity, but the EPSS score of less than 1% and the fact that the vulnerability is not listed in the CISA KEV catalog suggest that exploitation is unlikely. The bug itself does not provide a reliable attack vector; it merely changes a warning, so an attacker cannot leverage it to gain access or cause arbitrary damage. The primary risk is noise in logs which could, in extreme cases, contribute to denial of service if logs overflow or obscure other messages, but such a scenario is far from common.
OpenCVE Enrichment