-

CVE-2026-97422

drm/amdkfd: fix SMI event cross-process information leak

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: fix SMI event cross-process information leak

kfd_smi_ev_enabled() skips the suser privilege check when pid=0.
PROCESS_START, PROCESS_END, and VMFAULT events are emitted with
pid=0 while carrying another process's PID and command name, so any
/dev/kfd user in the render group can monitor all GPU workloads.

Pass the target process PID into kfd_smi_event_add() for these events
so the existing per-client filter restricts delivery to the owning
process or CAP_SYS_ADMIN subscribers.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 938a0650aae6275ba8e924685836bdee2c6aa3db
Version < 5bb2dfa65d8da83e87b2a31c270bc567df69a5ca
Status affected
Version 938a0650aae6275ba8e924685836bdee2c6aa3db
Version < 92a8dba246d371fe268280e5fd74b0955688e6df
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.9
Status affected
Version 0
Version < 5.9
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.04
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5bb2dfa65d8da83e87b2a31c270bc567df69a5ca
https://git.kernel.org/stable/c/92a8dba246d371fe268280e5fd74b0955688e6df