CVE-2026-97422
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/09/2026
Última modificación:
25/09/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amdkfd: fix SMI event cross-process information leak<br />
<br />
kfd_smi_ev_enabled() skips the suser privilege check when pid=0.<br />
PROCESS_START, PROCESS_END, and VMFAULT events are emitted with<br />
pid=0 while carrying another process&#39;s PID and command name, so any<br />
/dev/kfd user in the render group can monitor all GPU workloads.<br />
<br />
Pass the target process PID into kfd_smi_event_add() for these events<br />
so the existing per-client filter restricts delivery to the owning<br />
process or CAP_SYS_ADMIN subscribers.


