Impact
The patch addresses a flaw in the Linux s390 kernel where two consecutive calls to the PMU stop callback could occur when high sampling load triggers throttling and a task is later removed by the scheduler. Without the added guard, the second call could leave the PMU in an inconsistent state, potentially causing a kernel panic or other abnormal termination. The vulnerability is therefore a source of denial of service where an attacker could force the kernel to crash by manipulating performance monitoring events.
Affected Systems
All Linux kernel distributions utilizing the s390 architecture are affected, as the vulnerability resides in the kernel core. The patch applies to any kernel version before the change made in the commit identified by cf348ec613f75b97. No specific version ranges are listed in the data, so any release before that commit is potentially impacted.
Risk and Exploitability
The CVSS score and EPSS data are not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the flaw is internal to kernel performance‑monitoring handling and would require an attacker to trigger a high sampling load or to misuse perf_event calls such as PERF_EVENT_IOC_PERIOD for the restricted events. The likely attack vector involves crafted perf_event interactions that cause the kernel to issue multiple stop callbacks, leading to a service disruption. Because no exploitation indicators are present, the risk is considered moderate to high for impacted systems if left unpatched.
OpenCVE Enrichment