Impact
A defect in the Linux kernel’s perf/amd/ibs subsystem caused an unsafe call to perf_allow_kernel() while executing in Non‑Maskable Interrupt (NMI) context. The call in this hard‑interrupt environment can trigger a kernel fault, leading to a crash. The fix removes the unsafe call and stores the required permission flag during event initialization, allowing the NMI handler to reference a cached value instead.
Affected Systems
Systems running a Linux kernel that includes the perf/amd/ibs code path are affected. The CNA data lists the vendor/product as Linux:Linux, and no specific version ranges are provided, so any kernel containing the original perf/amd/ibs implementation could be vulnerable.
Risk and Exploitability
The CVSS score is 5.5 and the EPSS score is < 1%, and the vulnerability is not listed in the CISA KEV catalog, indicating no publicly known exploitation at this time. However, the nature of the flaw—an unsafe operation in the NMI handler—implies a high potential for denial of service if an attacker can trigger an NMI during active IBS activity. Exact exploitation conditions are not detailed, so the likelihood remains uncertain but the impact is severe due to possible system‑wide kernel crashes.
OpenCVE Enrichment