It's not a weakness. If the condition triggers, nothing bad really happens. The justification given in the patch is that the private key might be given to a pl

It's not a weakness. If the condition triggers, nothing bad really happens. The justification given in the patch is that the private key might be given to a pluggable random number generator, which may presumably be controlled by an attacker or otherwise leak the key somehow. In that case, this bit of code is the least of your problems, since every other entropy is also being equally leaked.