The Intel iwlwifi driver in the Linux kernel previously emitted a WARN_ON message when WoWLAN was enabled and the system was suspended while the wireless adapter was not connected and no netdetect configuration existed. This is identified as CWE-617. The issue was addressed by removing the warning and ensuring the driver correctly handles this scenario. The vulnerability carries a CVSS score of 2.3, denoting low severity, and does not enable data loss, privilege escalation, or denial of service.

Linux kernels that contain the Intel iwlwifi driver before the commit that removes the WARN_ON call are affected. This includes most distributions using older kernels with that code, regardless of distribution brand. Systems with such kernels may see the warning when WoWLAN is active and the adapter is disconnected during suspend.

The EPSS score is less than 1 percent and the vulnerability is not listed in CISA’s KEV catalog, indicating a very low exploitation probability. Based on the description, it is inferred that the attack requires local access to enable WoWLAN and trigger suspend while the adapter is disconnected, a relatively uncommon scenario. Because the flaw only generates a kernel warning and does not expose data or grant privileges, the overall risk remains low.