Description
In the Linux kernel, the following vulnerability has been resolved:

printk: Don't WARN on kthread_run failure.

Since __kthread_create_on_node() returns -EINTR upon SIGKILL,
we should not use WARN_ON() in order to catch kthread_run() failure.
Published: 2026-09-25
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Noise in system logs and potential diagnostic confusion
Action: Apply kernel patch
AI Analysis

Impact

The fix removes the WARN_ON call that was triggered when the kernel thread creation function returned -EINTR due to a SIGKILL. The original code caused unnecessary warning messages in the kernel log whenever a thread startup failed for this reason. The bug does not expose sensitive data, nor does it allow privilege escalation or direct modification of kernel state. The impact is limited to producing spurious warning logs that could clutter diagnostics and potentially mask real issues.

Affected Systems

All Linux kernel distributions that ship a kernel before the patch, which includes many older releases across all major distributions and custom or embedded systems that have not yet applied the upstream change. Users should verify that their kernel is at or beyond the commit that removes the WARN_ON check, otherwise the spurious log entries will continue to occur.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, but the EPSS score of less than 1% and the fact that the vulnerability is not listed in the CISA KEV catalog suggest that exploitation is unlikely. The bug itself does not provide a reliable attack vector; it merely changes a warning, so an attacker cannot leverage it to gain access or cause arbitrary damage. The primary risk is noise in logs which could, in extreme cases, contribute to denial of service if logs overflow or obscure other messages, but such a scenario is far from common.

Generated by OpenCVE AI on September 30, 2026 at 11:10 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install a kernel version that includes the upstream patch that removes the WARN_ON from kthread_run failures
  • If using a custom kernel or older distribution, backport the patch to the local kernel source; rebuild and load the updated kernel
  • On systems where an immediate kernel update is not possible, isolate the failure path by adjusting custom thread creation code to check return values without triggering WARN_ON, and monitor log sizes closely to avoid log flooding

Generated by OpenCVE AI on September 30, 2026 at 11:10 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 13:30:00 +0000


Tue, 29 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-628

Tue, 29 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-617
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low


Fri, 25 Sep 2026 13:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-628

Fri, 25 Sep 2026 10:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since __kthread_create_on_node() returns -EINTR upon SIGKILL, we should not use WARN_ON() in order to catch kthread_run() failure.
Title printk: Don't WARN on kthread_run failure.
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-15T10:12:20.302Z

Reserved: 2026-09-25T10:25:14.320Z

Link: CVE-2026-98147

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-09-25T11:17:46.257

Modified: 2026-10-15T11:18:11.917

Link: CVE-2026-98147

cve-icon Redhat

Severity : Low

Publid Date: 2026-09-25T00:00:00Z

Links: CVE-2026-98147 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T11:15:16Z

Weaknesses