This vulnerability in the Linux kernel's perf/amd/ibs component involved calling the function perf_allow_kernel() from within the IBS NMI handler context. Since calling this function in an NMI context is unsafe and could lead to fatal kernel errors, the vulnerability was addressed by capturing the permission at event initialization and storing it in event->hw.flags. The NMI handler then uses this cached flag instead of calling perf_allow_kernel() directly, preventing unsafe operations during NMI handling.

Exploitation of this vulnerability could cause fatal errors in the kernel due to unsafe function calls in the NMI context. This could lead to system instability or crashes. The vulnerability requires local privileges with low complexity and no user interaction, but no known exploits are reported in the wild.

A fix is available that addresses this issue by changing the kernel code to cache permission flags and avoid unsafe calls in the NMI handler. Users should update to Linux kernel versions 7.0.0-28.28.1 or later where this vulnerability is resolved. Patch status is confirmed by the affectedVersions field indicating versions prior to 7.0.0-28.28.1 are vulnerable.