Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of performance monitoring events for AMD processors has been addressed. The issue arose because the 'status' variable, which holds unprocessed overflow bits, was not adequately cleared in certain situations. This oversight led to a warning being issued during the interrupt handling of the AMD performance monitoring unit. The problem occurred because the loop continued before the status bit was reset, particularly when the function x86_perf_event_set_period() returned 0. As a result, there was a discrepancy: while the 'handled' counter was incremented, the status bit remained uncleared. The solution involved moving the bit-clearing operation to occur simultaneously with the 'handled' counter increment, ensuring proper synchronization and consistency in event handling.
The vulnerability could lead to incorrect handling of performance monitoring events, potentially allowing unhandled overflow bits to persist and cause inconsistencies in event processing.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.