CVE-2023-53994
kernel: ionic: remove WARN_ON to prevent panic_on_warn
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 24, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ionic: remove WARN_ON to prevent panic_on_warn
Remove unnecessary early code development check and the WARN_ON that it uses. The irq alloc and free paths have long been cleaned up and this check shouldn't have stuck around so long.
Statement
This change is a robustness hardening: it removes a leftover WARN_ON() that can become fatal when panic_on_warn is enabled, turning a benign warning into a host crash/reboot (DoS). There is no memory corruption primitive here, so impact is limited to availability and depends on reaching the warning condition via the ionic driver control paths.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-703 · Improper Check or Handling of Exceptional Conditions