CVE-2026-97422

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amdkfd: fix SMI event cross-process information leak<br /> <br /> kfd_smi_ev_enabled() skips the suser privilege check when pid=0.<br /> PROCESS_START, PROCESS_END, and VMFAULT events are emitted with<br /> pid=0 while carrying another process&amp;#39;s PID and command name, so any<br /> /dev/kfd user in the render group can monitor all GPU workloads.<br /> <br /> Pass the target process PID into kfd_smi_event_add() for these events<br /> so the existing per-client filter restricts delivery to the owning<br /> process or CAP_SYS_ADMIN subscribers.