The Linux kernel's perf/x86/intel subsystem had multiple issues in the validation and configuration of ACR masks used for performance monitoring. User space ACR mask validation was incomplete, allowing bits from other event groups to be included without rejection. An early return on detecting invalid bits caused subsequent ACR groups to be skipped, potentially leading to partial or incorrect configuration. Additionally, stale hardware ACR masks were not cleared before applying new configurations, risking incorrect hardware state. The patch addresses these by identifying the correct event index group and dropping invalid bits instead of aborting, iterating through all ACR events to ensure complete configuration, and explicitly clearing stale hardware masks before setting new ones. A comment notes a theoretical risk if a non-leader event member is disabled, which could cause bit-shifting errors, but this is not considered a practical concern due to ACR sampling requirements.

The vulnerability could lead to improper validation and configuration of ACR masks in the Linux kernel's performance monitoring subsystem, potentially causing incorrect performance event sampling or monitoring behavior. However, no known exploits are reported, and the theoretical risk related to disabled non-leader events is unlikely to be exploitable in real-world scenarios.

A fix has been implemented in the Linux kernel to address the incomplete validation and configuration issues of ACR masks. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply them accordingly.